Network Attacks

Question 1

_____ is a scripting language for Microsoft Office that uses macros to perform a sequence of actions in the context of a word processor, spreadsheet, or presentation file.

Answer 1

Visual Basic for Applications (VBA)

Question 2

_____ refers to using an exploit in Bluetooth to steal information from someone else’s phone. The exploit (now patched) allows attackers to circumvent the authentication mechanism.

Answer 2

Bluesnarfing

Question 3

_____ is an RFID attack where an attacker uses a fraudulent RFID reader to read the signals from a contactless bank card.

Answer 3

Skimming

Question 4

A Bluetooth-discoverable device is vulnerable to _____, similar to spam, where someone sends an unsolicited text (or picture/video) message or vCard (contact details). This can be a vector for Trojan malware.

Answer 4

bluejacking

Question 5

_____ is based on a particular type of radio frequency ID or RFID. It is commonly available on smartphones for processing wireless payments.

Answer 5

NFC or near field communication

Question 6

An _____ attack modifies the __ of an encrypted wireless packet during transmission to compute the RC4 keystream to decrypt all other wireless traffic. This attack becomes useless when WPA or WPA2 wireless protection is enabled.

Answer 6

Initialization Vector, IV

Question 7

_____ is used against network switches that aim to exhaust the memory used to store the switch’s MAC address table.

Answer 7

MAC flooding

Question 8

_____ is a scripting language for Microsoft Office that uses macros to perform a sequence of actions in the context of a word processor, spreadsheet, or presentation file.

Answer 8

Visual Basic for Applications (VBA)

Question 9

An _____ is a network attack that involves connections between embedded system devices.

Answer 9

operational technology attack

Question 10

An _____ attack targets vulnerabilities in the headers and payloads of specific application protocols. For example, one type of amplification attack targets DNS services with bogus queries.

Answer 10

application

Question 11

A _____ attack aims at consuming network bandwidth and denying it to legitimate hosts. For example, a SYN flood attack works by withholding the client’s ACK packet during TCP’s three-way handshake.

Answer 11

network

Question 12

_____ occurs when the attacker would craft a malicious URL and convince the victim to submit it to the web server.

Answer 12

HTTP Response Splitting

Question 13

_____ is a malicious script hosted on the attacker’s site that can exploit a session started on another site in the same browser.

Answer 13

Cross-site Request Forgery (XSRF)

Question 14

_____ are data stored on a user’s computer by websites that use Adobe Flash Player.

Answer 14

Locally Shared Objects (LSOs), or Flash cookies

Question 15

A _____ attack uses _____ packets to remove a known wireless access point (WAP) from a client’s list of available networks. This is a type of DoS on wireless networks.

Answer 15

disassociation

Question 16

A _____ attack sends a stream of spoofed frames to cause a client to _____. This is a type of DoS attack on wireless networks.

Answer 16

deauthentication