Security Quiz - Solution Views

#1. In computer security, _________ means that computer system assets can be modified only by authorized parities.

Confidentiality

Availability

Authenticity

Integrity

#2. In computer security, ___________means that the information in a computer system only is accessible for reading by authorized parities.

Availability

Integrity

Confidentiality

Authenticity

#3. The type of threats on the security of a computer system or network are _________
i) Interruption
ii) Interception
iii) Modification
iv) Creation
v) Fabrication

ii, iii, iv and v only

i, ii, iii and v only

i, ii, iii, iv and v

i, ii, iii and iv only

#4. Which of the following is an independent malicious program that need not any host program?

Trap doors

Virus

Trojan horse

Worm

#5. The ……………………is code that recognizes some special sequence of input or is triggered by being run from a certain user ID of by unlikely a sequence of events.

Virus

Logic Bomb

Trojan horse

Trap doors

#6. The …………….. is a code embedded in some legitimate program that is set to “explode” when certain conditions are met.

Logic Bomb

Trojan horse

Virus

Trap doors

#7. Which of the following malicious program do not replicate automatically?

Trojan Horse

Worm

Zombie

Virus

#8. __________ programs can be used to accomplish functions indirectly that an unauthorized user could not accomplish directly.

Worm

Logic Bomb

Zombie

Trojan Horses

#9. State whether true or false.
i) A worm mails a copy of itself to other systems.
ii) A worm executes a copy of itself on another system.

True, False

False, False

True, True

False, True

#10. A ___________ is a program that can infect other programs by modifying them, the modification includes a copy of the virus program, which can go on to infect other programs.

Zombie

Trap doors

Virus

Worm

#11. ____________ are used in denial of service attacks, typically against targeted websites.

Virus

Worm

Zombie

Trojan horse

#12. Select the correct order for the different phases of virus execution.
i) Propagation phase
ii) Dormant phase
iii) Execution phase
iv) Triggering phase

i, iii, ii and iv

ii, iii, iv and i

ii, i, iv an iii

i, ii, iii, and iv

#13. A __________________attaches itself to executable files and replicates, when the infected program is executed, by finding other executable files to infect.

Macro Virus

Stealth virus

Parasitic Virus

Polymorphic Virus

#14. _____________Is a form of virus explicitly designed to hide from detection by antivirus software.

Macro Virus

Parasitic Virus

Polymorphic Virus

Stealth virus

#15. _____________Is a form of virus explicitly designed to hide from detection by antivirus software.

Macro Virus

Parasitic Virus

Stealth virus

Polymorphic Virus

#16. A ____________ Creates copies during replication that are functionally equivalent but have distinctly different bit patterns.

Parasitic Virus

Polymorphic Virus

Macro Virus

Boot Sector Virus

#17. A portion of the Polymorphic virus, generally called a ___________ creates, a random encryption, key to encrypt the remainder of the virus.

Multiple engines

Polymorphic engines

Mutation engine

Mutual engine

#18. State whether the following statement is true.
i) A macro virus is platform independent.
ii) Macro viruses infect documents, not executable portions of code.

Non i and ii

ii-only

Both i and ii

i-only

#19. The type(s) of auto-executing macros, in Microsoft word, is/are __________.

Auto execute

Command macro

Auto Macro

All of the above

#20. In ____________ the virus places an identical copy of itself into other programs or into certain system areas on the disk.

Propagation phase

Dormant phase

Execution phase

Triggering phase

#21. A _________ is a program that secretly takes over another Internet-attached computer and then uses that computer to launch attacks.

Virus

Worm

Zombie

Trap doors

#22. Which of the following are the solutions to network security?
i) Encryption
ii) Authentication
iii) Authorization
iv) Non-repudiation

i, ii and iii only

i, iii and iv only

All i, ii, iii and iv

ii, iii and iv only

#23. __________ is to protect data and passwords.

Encryption

Authentication

Non-repudiation

Authorization

#24. The following protocols and systems are commonly used to provide various degrees of security services in a computer networks.
i) IP filtering
ii)Reverse Address Translation
iii) IP security Architecture (IPsec)
iv) Firewalls
v) Socks

i, ii, iii and iv only

All i, ii, iii, iv and v

i, iii, iv and v only

ii, iii, iv and v only

#25. A firewall is installed at the point where the secure internal network and untrusted external network meet which is also known as____________.

Firewall point

Meeting point

Secure point

Chock point

#26. Which of the following is / are the types of firewall?

Packet Filtering Firewall

Dual Homed Gateway Firewall

All of the above

Screen Host Firewall

#27. The components of IP security includes _____________.

Internet key Exchange (IKE)

Encapsulating Security Payload (ESP)

All of the above

Authentication Header

#28. ______________ Is used to carry traffic of one protocol over a network that does not support that protocol directly.

Trafficking

Tunneling

Transferring

Switching

#29. In _____________ Mode, the authentication header is inserted immediately after the IP header.

Authentication

Tunnel

Both A and B

Transport

#30. State true or false.
i) Socks are a standard for circuit-level gateways.
ii) The NAT is used for a small number of the hosts in a

True, True

False, True

False, False

True, False

#31. A ____________ is an extension of an enterprise’s private intranet across a public Network such as the Internet across a public Network such as the Internet, creating a secure private connection.

VSPN

VNP

VSN

VPN

#32. The primary goal of the __________ protocol is to provide a private channel between communicating application, which ensures privacy of data authentication of the partners, and integrity.

ESP

TSL

PSL

SSL

#33. The ___________ is used to provide integrity check, authentication and encryption to IP datagram.

ESP

SSL

TSL

PSL

#34. In ___________mode, a common technique in packet-switched networks consists of wrapping a packet in a new one.

Both A and B

None of the All

Encapsulation

Tunneling

#35. The ___________Is a collection of protocols designed by Internet Engineering Task Force(IETF) to provide security for a packet at the Network level.

Protocolsec

Packetsec

Netsec

IPsec

#36. At the lower layer of SSL, a protocol for transferring data using a variety of predefined cipher and authentication combinations called the_____________.

SSL cipher protocol

SSL record protocol

SSL authentication protocol

SSL handshake protocol

#37. While initiating SSL session, the client code recognizes the SSL request and establishes a connection through TCP Part ____________To the SSL code on the server.

420

1032

322

443

#38. On the upper layer of SSL, a protocol for initial authentication and transfer of encryption keys called the ____________.

SSL authentication protocol

SSL handshake protocol

SSL cipher protocol

SSL record protocol

#39. State whether the following statement is true.
i) An application-level gateway is often referred to as a proxy.
ii) In proxy, a direct connection is established between the client and the destination server.

True, False

False, True

False, False

True, False

#40. In the packet-filtering router, the following information can be external from the packet header.
i) Source IP address
ii) Destination IP address
iii) TCP/UDP source port
iv) ICMP message type
v) TCP/UDP destination port

i, iii, iv and v only

i, ii, iii and iv only

All i, ii, iii, iv and v

ii, iii, iv and v only

#41. ___________ Mode is used whenever either end of a security association is the gateway.

Tunnel

Encapsulating

Transport

Gateway

#42. Why would a hacker use a proxy server?

To hide malicious activity on the network.

To create a ghost server on the network.

To create a stronger connection with the target.

To obtain a remote access connection.

#43. What type of symmetric key algorithm using a streaming cipher to encrypt information?

Blowfish

MD5

SHA

RC4

#44. Which of the following is not a factor in securing the environment against an attack on security?

The level of access provided to employees.

The education of the attacker.

The system configuration.

The network architecture.

The business strategy of the company.

#45. What type of attack uses a fraudulent server with a relay address?

SMB

MITM

NetBIOS

NTLM

#46. What port is used to connect to the Active Directory in Windows 2000?

445

139

389

80

#47. To hide information inside a picture, what technology is used?

Image Rendering

Bitmapping

Rootkits

Steganography

#48. Which phase of hacking performs an actual attack on a network or system?

Scanning

Gaining Access

Maintaining Access

Reconnaissance

#49. Attempting to gain access to a network using an employee’s credentials is called the _____________ mode of ethical hacking.

Local networking

Remote networking

Physical entry

Social engineering

#50. Which Federal Code applies the consequences of hacking activities that disrupt subway transit systems?

18 U.S.C. § 1030

18 U.S.C. § 1029.

Electronic Communications Interception of Oral Communications.

Cyber Security Enhancement Act 2002.

#51. Which of the following is not a typical characteristic of an ethical hacker?

Patience, persistence and perseverance.

Understands the process of exploiting network vulnerabilities.

Excellent knowledge of Windows.

Has the highest level of security for the organization.

#52. What is the proper command to perform a Nmap XMAS scan every 15seconds?

nmap -sX -polite

nmap -sX -aggressive

nmap -sX -paranoid

nmap -sX -sneaky

#53. What type of rootkit will patch, hook, or replace the version of system call in order to hide information?

Application level rootkits

System level rootkits

Library level rootkits

Kernel level rootkits

#54. What is the purpose of a Denial of Service attack?

To execute a Trojan on a system.

To shutdown services by turning them off.

To overload a system so it is no longer operational.

Exploit a weakness in the TCP/IP stack.

#55. What are some of the most common vulnerabilities that exist in a network or system?

Changing manufacturer, or recommended, settings of a newly installed application.

Utilizing open source application code.

Balancing security concerns with functionality and ease of use of a system.

Additional unused features on commercial software packages.

#56. What is the sequence of a TCP connection?

SYN-ACK

SYN-SYN-ACK

SYN-SYN ACK-ACK

SYN-ACK-FIN

#57. What tool can be used to perform SNMP enumeration?

DNSlookup

Nslookup

Whois

IP Network Browser

#58. Which ports should be blocked to prevent null session enumeration?

Ports 135 and 139

Ports 110 and 137

Ports 135 and 136

Ports 120 and 445

#59. The first phase of hacking an IT system is compromise of which foundation of security?

Confidentiality

Authentication

Integrity

Availability

#60. How is IP address spoofing detected?

Installing and configuring a IDS that can read the IP header.

Implementing a firewall to the network.

Identify all TCP sessions that are initiated but does not complete successfully.

Comparing the TTL values of the actual and spoofed addresses.

#61. Why would a ping sweep be used?

To identify open ports

To identify live systems

To locate live systems

To locate firewalls

#62. What are the port states determined by Nmap?

Active, inactive, standby

Active, closed, unused

Open, filtered, unfiltered

Open, half-open, closed

#63. What port does Telnet use?

22

20

23

80

#64. Which of the following will allow footprinting to be conducted without detection?

PingSweep

ARIN

War Dialers

Traceroute

#65. Performing hacking activities with the intent on gaining visibility for an unfair situation is called ________.

Hacktivism

Analysis

Exploitation

Cracking

Results

#1. In computer security, _________ means that computer system assets can be modified only by authorized parities.

#2. In computer security, ___________means that the information in a computer system only is accessible for reading by authorized parities.

#3. The type of threats on the security of a computer system or network are _________ i) Interruptionii) Interceptioniii) Modificationiv) Creationv) Fabrication

#4. Which of the following is an independent malicious program that need not any host program?

#5. The ……………………is code that recognizes some special sequence of input or is triggered by being run from a certain user ID of by unlikely a sequence of events.

#6. The …………….. is a code embedded in some legitimate program that is set to “explode” when certain conditions are met.

#7. Which of the following malicious program do not replicate automatically?

#8. __________ programs can be used to accomplish functions indirectly that an unauthorized user could not accomplish directly.

#9. State whether true or false. i) A worm mails a copy of itself to other systems. ii) A worm executes a copy of itself on another system.

#10. A ___________ is a program that can infect other programs by modifying them, the modification includes a copy of the virus program, which can go on to infect other programs.

#11. ____________ are used in denial of service attacks, typically against targeted websites.

#12. Select the correct order for the different phases of virus execution.i) Propagation phaseii) Dormant phaseiii) Execution phaseiv) Triggering phase

#13. A __________________attaches itself to executable files and replicates, when the infected program is executed, by finding other executable files to infect.

#14. _____________Is a form of virus explicitly designed to hide from detection by antivirus software.

#15. _____________Is a form of virus explicitly designed to hide from detection by antivirus software.

#16. A ____________ Creates copies during replication that are functionally equivalent but have distinctly different bit patterns.

#17. A portion of the Polymorphic virus, generally called a ___________ creates, a random encryption, key to encrypt the remainder of the virus.

#18. State whether the following statement is true.i) A macro virus is platform independent.ii) Macro viruses infect documents, not executable portions of code.

#19. The type(s) of auto-executing macros, in Microsoft word, is/are __________.

#20. In ____________ the virus places an identical copy of itself into other programs or into certain system areas on the disk.

#21. A _________ is a program that secretly takes over another Internet-attached computer and then uses that computer to launch attacks.

#22. Which of the following are the solutions to network security?i) Encryptionii) Authenticationiii) Authorizationiv) Non-repudiation

#23. __________ is to protect data and passwords.

#24. The following protocols and systems are commonly used to provide various degrees of security services in a computer networks.i) IP filteringii)Reverse Address Translationiii) IP security Architecture (IPsec)iv) Firewallsv) Socks

#25. A firewall is installed at the point where the secure internal network and untrusted external network meet which is also known as____________.

#26. Which of the following is / are the types of firewall?

#27. The components of IP security includes _____________.

#28. ______________ Is used to carry traffic of one protocol over a network that does not support that protocol directly.

#29. In _____________ Mode, the authentication header is inserted immediately after the IP header.

#30. State true or false. i) Socks are a standard for circuit-level gateways.ii) The NAT is used for a small number of the hosts in a

#31. A ____________ is an extension of an enterprise’s private intranet across a public Network such as the Internet across a public Network such as the Internet, creating a secure private connection.

#32. The primary goal of the __________ protocol is to provide a private channel between communicating application, which ensures privacy of data authentication of the partners, and integrity.

#33. The ___________ is used to provide integrity check, authentication and encryption to IP datagram.

#34. In ___________mode, a common technique in packet-switched networks consists of wrapping a packet in a new one.

#35. The ___________Is a collection of protocols designed by Internet Engineering Task Force(IETF) to provide security for a packet at the Network level.

#36. At the lower layer of SSL, a protocol for transferring data using a variety of predefined cipher and authentication combinations called the_____________.

#37. While initiating SSL session, the client code recognizes the SSL request and establishes a connection through TCP Part ____________To the SSL code on the server.

#38. On the upper layer of SSL, a protocol for initial authentication and transfer of encryption keys called the ____________.

#39. State whether the following statement is true.i) An application-level gateway is often referred to as a proxy.ii) In proxy, a direct connection is established between the client and the destination server.

#40. In the packet-filtering router, the following information can be external from the packet header.i) Source IP address ii) Destination IP address iii) TCP/UDP source port iv) ICMP message type v) TCP/UDP destination port

#41. ___________ Mode is used whenever either end of a security association is the gateway.

#42. Why would a hacker use a proxy server?

#43. What type of symmetric key algorithm using a streaming cipher to encrypt information?

#44. Which of the following is not a factor in securing the environment against an attack on security?

#45. What type of attack uses a fraudulent server with a relay address?

#46. What port is used to connect to the Active Directory in Windows 2000?

#47. To hide information inside a picture, what technology is used?

#48. Which phase of hacking performs an actual attack on a network or system?

#49. Attempting to gain access to a network using an employee’s credentials is called the _____________ mode of ethical hacking.

#50. Which Federal Code applies the consequences of hacking activities that disrupt subway transit systems?

#51. Which of the following is not a typical characteristic of an ethical hacker?

#52. What is the proper command to perform a Nmap XMAS scan every 15seconds?

#53. What type of rootkit will patch, hook, or replace the version of system call in order to hide information?

#54. What is the purpose of a Denial of Service attack?

#55. What are some of the most common vulnerabilities that exist in a network or system?

#56. What is the sequence of a TCP connection?

#57. What tool can be used to perform SNMP enumeration?

#58. Which ports should be blocked to prevent null session enumeration?

#59. The first phase of hacking an IT system is compromise of which foundation of security?

#60. How is IP address spoofing detected?

#61. Why would a ping sweep be used?

#62. What are the port states determined by Nmap?

#63. What port does Telnet use?

#64. Which of the following will allow footprinting to be conducted without detection?

#65. Performing hacking activities with the intent on gaining visibility for an unfair situation is called ________.

#3. The type of threats on the security of a computer system or network are _________
i) Interruption
ii) Interception
iii) Modification
iv) Creation
v) Fabrication

#9. State whether true or false.
i) A worm mails a copy of itself to other systems.
ii) A worm executes a copy of itself on another system.

#12. Select the correct order for the different phases of virus execution.
i) Propagation phase
ii) Dormant phase
iii) Execution phase
iv) Triggering phase

#18. State whether the following statement is true.
i) A macro virus is platform independent.
ii) Macro viruses infect documents, not executable portions of code.

#22. Which of the following are the solutions to network security?
i) Encryption
ii) Authentication
iii) Authorization
iv) Non-repudiation

#24. The following protocols and systems are commonly used to provide various degrees of security services in a computer networks.
i) IP filtering
ii)Reverse Address Translation
iii) IP security Architecture (IPsec)
iv) Firewalls
v) Socks

#30. State true or false.
i) Socks are a standard for circuit-level gateways.
ii) The NAT is used for a small number of the hosts in a

#39. State whether the following statement is true.
i) An application-level gateway is often referred to as a proxy.
ii) In proxy, a direct connection is established between the client and the destination server.

#40. In the packet-filtering router, the following information can be external from the packet header.
i) Source IP address
ii) Destination IP address
iii) TCP/UDP source port
iv) ICMP message type
v) TCP/UDP destination port