Security - Attacks

Question 1

DoS

Answer 1

Denial of Service

Question 2

DDoS

Answer 2

Distributed Denial of Service Attacks

Question 3

Social Engineering

Answer 3

Intruder gains information from users to gain access to network

Question 4

Phishing

Answer 4

Form of social engineering

Question 5

Password Cracking

Answer 5

Brute-force attack - every possible combination of characters
Dictionary attack - variations of known passwords

Question 6

Packet Sniffing

Answer 6

Intercepts unencrypted packets to find username / password

Question 7

Man-in-the-middle

Answer 7

Attacker in the middle of a conversation

ARP cache poisoning

Question 8

ARP cache poisoning

Answer 8

Form of man-in-the-middle

Redirect conversations to attacker

Question 9

Evil Twin

Answer 9

Form of man-in-the-middle

Poses as legitimate WAP

Question 10

Session Hijacking

Answer 10

Form of man-in-the-middle

Hijack an active network session

Question 11

VLAN Hopping

Answer 11

Form of man-in-the-middle

Question 12

Buffer Overflow

Answer 12

Instructions can be ran or application will crash.

Backdoor entry can cause

Question 13

Virus

Answer 13

Malicious computer code

Spreads from system to system by user action

Question 14

Worm

Answer 14

Self-replicating virus

Usually establishes a backdoor

Question 15

Malware

Answer 15

Malicious programs intended to harm, disrupt, deny, or gain unauthorized access to a machine

Question 16

Logic Bomb

Answer 16

Resides in a system until trigger sets it off

Question 17

Zero-day Attack

Answer 17

Exploits software vulnerability unknown to developer

Question 18

Ransomware

Answer 18

Form of malware

Encrypts files and demands ransom

Question 19

Teardrop

Answer 19

Form of DoS

Fragmented packets sent to target. Machine crashes after being unable to reassemble packets.

Question 20

SYN Attack

Answer 20

Form of DoS

Multiple TCP SYN packets sent to overwhelm host’s memory

Question 21

Smurf

Answer 21

Form of DoS

Initiate broadcast messages with spoofed address that appears to be within the network

Question 22

PDoS

Answer 22

Permanent DoS

Malicious, renders hardware useless

Question 23

Spoof

Answer 23

Using a trusted IP address

Question 24

Reflective / amplified DoS

Answer 24

Spoof an IP address, send multiple requests, overwhelming responses sent to spoofed address

Question 25

Coordinated Attack

Answer 25

Form of DDoS

Orchestrated to a specific target

Question 26

Botnet

Answer 26

Form of DDoS

Group of infected computers attack another computer / system