Module 6 - System Hacking

Question 1

Cracking Passwords:

Searching for sensitive information in the user’s trash-bins, printer trash bins, and user desk for sticky notes.

a. Social Engineering
b. Shoulder Surfing
c. Dumpster Diving
d. Tailgating

Answer 1

c. Dumpster Diving

Question 2

Cracking Passwords:

The program tries every combination of characters until the password is broken.

a. Hybrid Attack
b. Rule-based Attack
c. Dictionary Attack
d. Brute Force Attack
e. Password Guessing

Answer 2

d. Brute Force Attack

Question 3

Cracking Passwords:

The attacker creates a list of all possible passwords from the information collected through social engineering or any other way and tries them manually on the victim’s machine to crack the passwords.

a. Hybrid Attack
b. Rule-based Attack
c. Dictionary Attack
d. Brute Force Attack
e. Password Guessing

Answer 3

e. Password Guessing

Question 4

Cracking Passwords:

Uses a combination of dictionary file and every combination of characters until the password is broken.

a. Hybrid Attack
b. Rule-based Attack
c. Dictionary Attack
d. Brute Force Attack
e. Password Guessing

Answer 4

a. Hybrid Attack

Comments:

Because in this case we have a Dictionary and Brute Force Attack.

Question 5

Cracking Passwords:

A dictionary file is loaded into the cracking application that runs against user accounts.

a. Hybrid Attack
b. Rule-based Attack
c. Dictionary Attack
d. Brute Force Attack
e. Password Guessing

Answer 5

c. Dictionary Attack

Question 6

Cracking Passwords:

Is a password supplied by the manufacturer with new equipment (e.g. switches, hubs, routers) that is password protected.

Answer 6

Default Password

Question 7

Cracking Passwords:

In a ______ attack, the attacker acquires access to the communication channels between victim and server to extract the information.

a. Replay Attack
b. Man-in-the-Middle Attack

Answer 7

b. Man-in-the-Middle Attack

Question 8

Cracking Passwords:

• Windows stores user password in ___, or in the Active Directory database in domains.
• Passwords are never stored in clear text; passwords are hashed and the results are stored in the ___.
  a. Kerberos Authentication
  b. NTLM Aughentication
  c. Security Accounts Manager (SAM) Database

Answer 8

c. Security Accounts Manager (SAM) Database

tst

Question 9

Cracking Passwords:

• Password _______ is a technique where random string of characters are added to the password before calculating their hashes.
• Makes it more difficult to reverse the hashes and defeat pre-computed hash attacks.
  a. Extensions
  b. Padding
  c. Salting
  d. Hashing

Answer 9

c. Salting

Question 10

Cracking Passwords:

This software cracks hashes with ranbow tables. I_t uses time-memory tradeoff algorithm_ to crack hashes.

a. Cain & Abel
b. RainbowCrack
c. Windows Password Key
d. hashcat

Answer 10

b. RainbowCrack

Comments

A traditional brute-force try all possible texts.

Using Time Memory Tradeoff algorithm, RainbolCrack pre computes all possible plaintexts hash pirs an stores them in the raimbow table file to futere use.

Its hard to compute hash, but easy and mor fast when using the R.table.

Question 11

Escalating Privileges:

Refers to acquiring the same level of privileges that already has been granted but assuming the identity of another user with the similar privileges.

a. Vertical Privilege Escalation
b. Horizontal Privilege Escalation

Answer 11

b. Horizontal Privilege Escalation

Question 12

Escalating Privileges:

Refers to gaining higher privileges than the existing.

a. Vertical Privilege Escalation
b. Horizontal Privilege Escalation

Answer 12

a. Vertical Privilege Escalation

Question 13

Escalating Privileges:

Windows Application Compatibility Framework, ____ is used to provide compatibility between the older and newer versions of Windows operating system.

a. Access Token Manipulation
b. Application Shimming
c. File System Permissions Weakness
d. Path Interception
e. Scheduled Task

Answer 13

b. Application Shimming

Question 14

Executing Applications:

Attackers execute malicious applications in this stage. This is called ______ the system.

a. Owning
b. Logging
c. Cracking
d. Running

Answer 14

a. Owning

Question 15

Executing Applications:

• It allows attacker to gather confidential information about victim such as email ID, passwords, banking details, chat room activity, IRC, instant messages, etc.
• Physical ones are placed between the keyboard hardware and the operating system.
  a. Spyware
  b. Backdoors
  c. Crackers
  d. Keyloggers

Answer 15

d. Keylogger

Question 16

Executing Applications:

• Is a stealthy program that records user’s interaction with the computer and internet without the user’s knowledge and sends them to the remote attackers.
• Hides its process, files, and other objects in order to avoid detection and removal.
  a. Spyware
  b. Backdoors
  c. Crackers
  d. Keyloggers

Answer 16

a. Spyware

Question 17

Hiding Files:

• Programs that hide their presence as well as attacker’s malicious activities, granting them full access to the server or host at that time and also in future.
• Replace certain operating system calls and utilities with its own modified versions of those routines that in turn undermine the security of the target system causing milicious functions to be executed.
• A typical one comprises of backdoor programs, DDoS programs, packet sniffers, log-wiping utilities, IRC bots, etc.
  a. Backdoor
  b. Rootkit
  c. Spyware
  d. Keylogger
  e. Crackers

Answer 17

b. Rootkit

Question 18

Hiding Files:

Adds malicious code or replaces original OS kernel and device driver codes.

a. Hypervisor Level Rootkit
b. Hardware/Firmware Rootkit
c. Kernel Level Rootkit
d. Boot Loader Level Rootkit
e. Library Level Rootkit

Answer 18

c. Kernel Level Rootkit

Question 19

Hiding Files:

____ is the ability to fork data into existing files without changing or altering their functionality, size, or display to file browsing utilities.

Answer 19

Alternate Data Stream (ADS)

Question 20

Hiding Files:

-A technique of hiding a secret message within an ordinary message and extracting it at the destination to maintain confidentiality of data.

Answer 20

Steganography

Question 21

Hiding Files:

• Is the art of discovering and rendering covert messages using steganography.
• It detects the hidden messages embedded in images, text, audio, and video carrier mediums using steganography.

Answer 21

Staganalysis

Question 22

Covering Tracks:

Attacker uses which of the following techniques to cover tracks on the target system. (Choose 2)

a. Hiding Files
b. Steganography
c. Disable Auditing
d. Clearing Logs
e. Wiping Computer

Answer 22

c. Disable Auditing
d. Clearing Logs