Protecting Your Network

Question 1

DNS Poisoning

Answer 1

In DNS cache poisoning an attacker targets a DNS server to query an evil DNS server instead of the correct one. The DNS server will cache that spoofed information, spreading it to hosts and possibly other servers.

Question 2

Zero-Day Attacks

Answer 2

New attacks using vulnerabilities that haven’t yet been identified (and fixed) are called zero-day attacks.

Question 3

Amplified DoS Attack

Answer 3

The aspect of a DoS attack that makes a server do alot of procesing and responding is called amplification, thus the term for this attack is an amplified DoS attack.

Question 4

Deauthentication (deauth) attack

Answer 4

A from of DoS attack that targets 802.11 networks specifically by sending out a frame that kicks a wireless client off its currnet WAP connection.

Question 5

Session Hijacking

Answer 5

The interception of a valid computer session to get authentication information.

Question 6

Virus

Answer 6

A virus only replicates to other applications on a deive or to other drives, such as flash drives or optical media. It does not replicat across networks. A virus needs human interaction to spread.

Question 7

Worm

Answer 7

Replicates exclusively through networks. Unlike a virus, a worm doesn’t require human interaction to spread. If the infected computer is on a network, it will immediately start sending copies of itself to any other computers it can locate on the network. Worms, unlike viruses, do not need host files to infect.

Question 8

Macro

Answer 8

Is any type of virus that exploits application macros to replicate and activate.

Question 9

Rootkit

Answer 9

A Trojian horse that takes advantage of very low-level operation system frunctions to hide itself from all but the most aggressive of anti-malware tools.

Question 10

Phishing

Answer 10

A social engineering technique where the attacker poses as a trusted source in order to obtain sensitive information.

Question 11

Locks computer

Answer 11

WINDOWS KEY + L – windows

CTRL + ALT + L – linux

Question 12

TEMPEST

Answer 12

Developed by the NSA to combat RF emanation, TEMPEST defines how to shield systems and manifests in a number of different products

Question 13

NAC

Answer 13

Network Access Control or Network Admission Control: is a standardized approach to verify that a node meets certain criteria before it si allowed to connect ot a network.

Question 14

Device Hardening

Answer 14

• Change default credentials
• Keep devices up to date
• Disabling unnecessary services
• Using secure protocols
• Disabling unused ports

Question 15

DAI

Answer 15

Dynamic ARP Inspection: Designed to prevent ARP cache poisoning. A technolody in switches that keeps track of ARP information, compiling a list of known good, identifiable IP and MAC addresses