Terms Lesson 1

Question 1

Eavesdropping

Answer 1

Escuchar secretamente

Question 2

Pod slurping

Answer 2

Extraer datos del computador a través de USB usando iPods

Question 3

Wire tapping

Answer 3

Escucha telefónica. Pinchazo telefónico

Question 4

IA

Answer 4

Information assurance

Question 5

Ciberkill chain

Answer 5

Real - recon
Women - weaponization
Date - delivery
Engineers - explotation
In - installation
Command - C2
Armor - actions and objectives

Question 6

Hacking phases

Answer 6

Recon
Scanning
Gaining access
Maintaining access
Clearing tracks

Question 7

Risk management

Answer 7

Identification
Assessment (evaluación)
Treatment
Tracking
Review

Question 8

Threat modeling

Answer 8

Identify security objectives
Application overview
Decompose the application
Identify threats
Identify vulnerabilities

Question 9

Ports:
NTP
TFTP
BGP
Kerberos
Finger
Netbios
LDAP
Telnet

Answer 9

123
69
179
88
79
139
389

Question 10

Which of the following information is collected using enumeration?

Open ports and services

Operating systems, location of web servers, users, and passwords

Email Recipient’s system IP address and geolocation

Network resources, network shares, and machine names

Answer 10

Network resources, network shares, and machine names

Enumeration is the process of extracting user names, machine names, network resources, shares, and services from a system or network.
Enumeration allows you to collect following information:
Network resources
Network shares
Routing tables
Audit and service settings
SNMP and FQDN details
Machine names
Users and groups
Applications and banners

Question 11

What is the default port used by IPSEC IKE protocol?

Port 51

Port 4500

Port 50

Port 500

Answer 11

Port 500

IPSEC IKE: IP Security Internet Key Exchange Protocol is used for establishing Security Association for IPsec Protocol Suite. IKE uses UDP port 500 for establishing security association.
UDP port 4500 is used IPsec NAT-T
Remote Mail Checking Protocol uses UDP/TCP port 50
Port 51 is reserved by IANA

Question 12

Which of the following NetBIOS service codes is used to obtain information related to the master browser name for the subnet?

<03>

<20>

<1D>

<1E>

Answer 12

1D

Question 13

Which of the following tools is not a NetBIOS enumeration tool?

Hyena

NetScanTools Pro

OpUtils

SuperScan

Answer 13

Among the given options, Hyena, SuperScan, and NetScanTools Pro can be used to perform NetBIOS enumeration, whereas OpUtils is an SNMP enumeration tool.

Question 14

Which of the following commands allows an SNMP agent to inform the pre-configured SNMP manager of a certain event?

GetNextRequest

Trap

GetResponse

SetRequest

Answer 14

Trap

SetRequest: Used by the SNMP manager to modify the value of a parameter within an SNMP agent’s management information base (MIB).
Trap: Used by an SNMP agent to inform the pre-configured SNMP manager of a certain event.
GetNextRequest: Used by the SNMP manager continuously to retrieve all the data stored in an array or table.
GetResponse: Used by an SNMP agent to satisfy a request made by the SNMP manager.

Question 15

Which of the following management information bases (MIBs) contains object types for workstation and server services?

HOSTMIB.MIB

MIB_II.MIB

WINS.MIB

LNMIB2.MIB

Answer 15

LNMIB2.MIB

WINS.MIB: For the Windows Internet Name Service (WINS)
HOSTMIB.MIB: Monitors and manages host resources.
MIB_II.MIB
: Manages TCP/IP-based Internet using a simple architecture and system.
LNMIB2.MIB: Contains object types for workstation and server services.

Question 16

Which protocol enables an attacker to enumerate user accounts and devices on a target system?

SMTP

SNMP

NetBIOS

TCP

Answer 16

SNMP

SNMP (Simple Network Management Protocol) is an application layer protocol that runs on UDP and maintains and manages routers, hubs, and switches on an IP network. SNMP agents run on Windows and UNIX networks on networking devices.
SNMP holds two passwords to access and configure the SNMP agent from the management station:
Read community string: It is public by default; allows viewing of device/system configuration
Read/write community string: It is private by default; allows remote editing of configuration
Attacker uses these default community strings to extract information about a device Attackers enumerate SNMP to extract information about network resources such as hosts, routers, devices, shares, etc. and network information such as ARP tables, routing tables, traffic, etc.