Security Quiz - Solution Views

#1. In computer security, _________ means that computer system assets can be modified only by authorized parities.

Availability

Integrity

Authenticity

Confidentiality

#2. In computer security, ___________means that the information in a computer system only is accessible for reading by authorized parities.

Integrity

Availability

Authenticity

Confidentiality

#3. The type of threats on the security of a computer system or network are _________
i) Interruption
ii) Interception
iii) Modification
iv) Creation
v) Fabrication

i, ii, iii and v only

ii, iii, iv and v only

i, ii, iii, iv and v

i, ii, iii and iv only

#4. Which of the following is an independent malicious program that need not any host program?

Trap doors

Worm

Virus

Trojan horse

#5. The ……………………is code that recognizes some special sequence of input or is triggered by being run from a certain user ID of by unlikely a sequence of events.

Trojan horse

Logic Bomb

Virus

Trap doors

#6. The …………….. is a code embedded in some legitimate program that is set to “explode” when certain conditions are met.

Logic Bomb

Trojan horse

Trap doors

Virus

#7. Which of the following malicious program do not replicate automatically?

Worm

Virus

Trojan Horse

Zombie

#8. __________ programs can be used to accomplish functions indirectly that an unauthorized user could not accomplish directly.

Trojan Horses

Zombie

Worm

Logic Bomb

#9. State whether true or false.
i) A worm mails a copy of itself to other systems.
ii) A worm executes a copy of itself on another system.

True, False

True, True

False, False

False, True

#10. A ___________ is a program that can infect other programs by modifying them, the modification includes a copy of the virus program, which can go on to infect other programs.

Trap doors

Worm

Zombie

Virus

#11. ____________ are used in denial of service attacks, typically against targeted websites.

Zombie

Worm

Virus

Trojan horse

#12. Select the correct order for the different phases of virus execution.
i) Propagation phase
ii) Dormant phase
iii) Execution phase
iv) Triggering phase

ii, i, iv an iii

ii, iii, iv and i

i, ii, iii, and iv

i, iii, ii and iv

#13. A __________________attaches itself to executable files and replicates, when the infected program is executed, by finding other executable files to infect.

Parasitic Virus

Polymorphic Virus

Macro Virus

Stealth virus

#14. _____________Is a form of virus explicitly designed to hide from detection by antivirus software.

Stealth virus

Macro Virus

Polymorphic Virus

Parasitic Virus

#15. _____________Is a form of virus explicitly designed to hide from detection by antivirus software.

Stealth virus

Polymorphic Virus

Macro Virus

Parasitic Virus

#16. A ____________ Creates copies during replication that are functionally equivalent but have distinctly different bit patterns.

Macro Virus

Parasitic Virus

Boot Sector Virus

Polymorphic Virus

#17. A portion of the Polymorphic virus, generally called a ___________ creates, a random encryption, key to encrypt the remainder of the virus.

Multiple engines

Mutation engine

Polymorphic engines

Mutual engine

#18. State whether the following statement is true.
i) A macro virus is platform independent.
ii) Macro viruses infect documents, not executable portions of code.

Non i and ii

i-only

ii-only

Both i and ii

#19. The type(s) of auto-executing macros, in Microsoft word, is/are __________.

Auto execute

All of the above

Auto Macro

Command macro

#20. In ____________ the virus places an identical copy of itself into other programs or into certain system areas on the disk.

Triggering phase

Propagation phase

Dormant phase

Execution phase

#21. A _________ is a program that secretly takes over another Internet-attached computer and then uses that computer to launch attacks.

Virus

Trap doors

Zombie

Worm

#22. Which of the following are the solutions to network security?
i) Encryption
ii) Authentication
iii) Authorization
iv) Non-repudiation

All i, ii, iii and iv

ii, iii and iv only

i, ii and iii only

i, iii and iv only

#23. __________ is to protect data and passwords.

Authorization

Encryption

Non-repudiation

Authentication

#24. The following protocols and systems are commonly used to provide various degrees of security services in a computer networks.
i) IP filtering
ii)Reverse Address Translation
iii) IP security Architecture (IPsec)
iv) Firewalls
v) Socks

i, ii, iii and iv only

ii, iii, iv and v only

i, iii, iv and v only

All i, ii, iii, iv and v

#25. A firewall is installed at the point where the secure internal network and untrusted external network meet which is also known as____________.

Firewall point

Chock point

Meeting point

Secure point

#26. Which of the following is / are the types of firewall?

All of the above

Screen Host Firewall

Packet Filtering Firewall

Dual Homed Gateway Firewall

#27. The components of IP security includes _____________.

Internet key Exchange (IKE)

Authentication Header

Encapsulating Security Payload (ESP)

All of the above

#28. ______________ Is used to carry traffic of one protocol over a network that does not support that protocol directly.

Tunneling

Transferring

Trafficking

Switching

#29. In _____________ Mode, the authentication header is inserted immediately after the IP header.

Both A and B

Authentication

Tunnel

Transport

#30. State true or false.
i) Socks are a standard for circuit-level gateways.
ii) The NAT is used for a small number of the hosts in a

False, False

True, True

False, True

True, False

#31. A ____________ is an extension of an enterprise’s private intranet across a public Network such as the Internet across a public Network such as the Internet, creating a secure private connection.

VSN

VPN

VNP

VSPN

#32. The primary goal of the __________ protocol is to provide a private channel between communicating application, which ensures privacy of data authentication of the partners, and integrity.

PSL

TSL

ESP

SSL

#33. The ___________ is used to provide integrity check, authentication and encryption to IP datagram.

ESP

PSL

SSL

TSL

#34. In ___________mode, a common technique in packet-switched networks consists of wrapping a packet in a new one.

Tunneling

None of the All

Both A and B

Encapsulation

#35. The ___________Is a collection of protocols designed by Internet Engineering Task Force(IETF) to provide security for a packet at the Network level.

Protocolsec

IPsec

Netsec

Packetsec

#36. At the lower layer of SSL, a protocol for transferring data using a variety of predefined cipher and authentication combinations called the_____________.

SSL record protocol

SSL cipher protocol

SSL authentication protocol

SSL handshake protocol

#37. While initiating SSL session, the client code recognizes the SSL request and establishes a connection through TCP Part ____________To the SSL code on the server.

443

420

322

1032

#38. On the upper layer of SSL, a protocol for initial authentication and transfer of encryption keys called the ____________.

SSL cipher protocol

SSL handshake protocol

SSL authentication protocol

SSL record protocol

#39. State whether the following statement is true.
i) An application-level gateway is often referred to as a proxy.
ii) In proxy, a direct connection is established between the client and the destination server.

True, False

False, True

False, False

#40. In the packet-filtering router, the following information can be external from the packet header.
i) Source IP address
ii) Destination IP address
iii) TCP/UDP source port
iv) ICMP message type
v) TCP/UDP destination port

All i, ii, iii, iv and v

i, iii, iv and v only

i, ii, iii and iv only

ii, iii, iv and v only

#41. ___________ Mode is used whenever either end of a security association is the gateway.

Gateway

Tunnel

Encapsulating

Transport

#42. Why would a hacker use a proxy server?

To create a stronger connection with the target.

To obtain a remote access connection.

To create a ghost server on the network.

To hide malicious activity on the network.

#43. What type of symmetric key algorithm using a streaming cipher to encrypt information?

SHA

RC4

Blowfish

MD5

#44. Which of the following is not a factor in securing the environment against an attack on security?

The system configuration.

The education of the attacker.

The business strategy of the company.

The network architecture.

The level of access provided to employees.

#45. What type of attack uses a fraudulent server with a relay address?

SMB

NTLM

NetBIOS

MITM

#46. What port is used to connect to the Active Directory in Windows 2000?

445

139

389

80

#47. To hide information inside a picture, what technology is used?

Steganography

Rootkits

Image Rendering

Bitmapping

#48. Which phase of hacking performs an actual attack on a network or system?

Gaining Access

Scanning

Reconnaissance

Maintaining Access

#49. Attempting to gain access to a network using an employee’s credentials is called the _____________ mode of ethical hacking.

Physical entry

Remote networking

Social engineering

Local networking

#50. Which Federal Code applies the consequences of hacking activities that disrupt subway transit systems?

Cyber Security Enhancement Act 2002.

Electronic Communications Interception of Oral Communications.

18 U.S.C. § 1030

18 U.S.C. § 1029.

#51. Which of the following is not a typical characteristic of an ethical hacker?

Excellent knowledge of Windows.

Has the highest level of security for the organization.

Patience, persistence and perseverance.

Understands the process of exploiting network vulnerabilities.

#52. What is the proper command to perform a Nmap XMAS scan every 15seconds?

nmap -sX -sneaky

nmap -sX -paranoid

nmap -sX -aggressive

nmap -sX -polite

#53. What type of rootkit will patch, hook, or replace the version of system call in order to hide information?

System level rootkits

Library level rootkits

Application level rootkits

Kernel level rootkits

#54. What is the purpose of a Denial of Service attack?

To execute a Trojan on a system.

Exploit a weakness in the TCP/IP stack.

To overload a system so it is no longer operational.

To shutdown services by turning them off.

#55. What are some of the most common vulnerabilities that exist in a network or system?

Changing manufacturer, or recommended, settings of a newly installed application.

Additional unused features on commercial software packages.

Utilizing open source application code.

Balancing security concerns with functionality and ease of use of a system.

#56. What is the sequence of a TCP connection?

SYN-ACK

SYN-ACK-FIN

SYN-SYN-ACK

SYN-SYN ACK-ACK

#57. What tool can be used to perform SNMP enumeration?

Nslookup

DNSlookup

IP Network Browser

Whois

#58. Which ports should be blocked to prevent null session enumeration?

Ports 120 and 445

Ports 135 and 139

Ports 110 and 137

Ports 135 and 136

#59. The first phase of hacking an IT system is compromise of which foundation of security?

Authentication

Integrity

Confidentiality

Availability

#60. How is IP address spoofing detected?

Comparing the TTL values of the actual and spoofed addresses.

Identify all TCP sessions that are initiated but does not complete successfully.

Implementing a firewall to the network.

Installing and configuring a IDS that can read the IP header.

#61. Why would a ping sweep be used?

To identify live systems

To locate firewalls

To locate live systems

To identify open ports

#62. What are the port states determined by Nmap?

Open, half-open, closed

Active, closed, unused

Active, inactive, standby

Open, filtered, unfiltered

#63. What port does Telnet use?

23

22

20

80

#64. Which of the following will allow footprinting to be conducted without detection?

PingSweep

Traceroute

ARIN

War Dialers

#65. Performing hacking activities with the intent on gaining visibility for an unfair situation is called ________.

Exploitation

Cracking

Analysis

Hacktivism

Results

#1. In computer security, _________ means that computer system assets can be modified only by authorized parities.

#2. In computer security, ___________means that the information in a computer system only is accessible for reading by authorized parities.

#3. The type of threats on the security of a computer system or network are _________ i) Interruptionii) Interceptioniii) Modificationiv) Creationv) Fabrication

#4. Which of the following is an independent malicious program that need not any host program?

#5. The ……………………is code that recognizes some special sequence of input or is triggered by being run from a certain user ID of by unlikely a sequence of events.

#6. The …………….. is a code embedded in some legitimate program that is set to “explode” when certain conditions are met.

#7. Which of the following malicious program do not replicate automatically?

#8. __________ programs can be used to accomplish functions indirectly that an unauthorized user could not accomplish directly.

#9. State whether true or false. i) A worm mails a copy of itself to other systems. ii) A worm executes a copy of itself on another system.

#10. A ___________ is a program that can infect other programs by modifying them, the modification includes a copy of the virus program, which can go on to infect other programs.

#11. ____________ are used in denial of service attacks, typically against targeted websites.

#12. Select the correct order for the different phases of virus execution.i) Propagation phaseii) Dormant phaseiii) Execution phaseiv) Triggering phase

#13. A __________________attaches itself to executable files and replicates, when the infected program is executed, by finding other executable files to infect.

#14. _____________Is a form of virus explicitly designed to hide from detection by antivirus software.

#15. _____________Is a form of virus explicitly designed to hide from detection by antivirus software.

#16. A ____________ Creates copies during replication that are functionally equivalent but have distinctly different bit patterns.

#17. A portion of the Polymorphic virus, generally called a ___________ creates, a random encryption, key to encrypt the remainder of the virus.

#18. State whether the following statement is true.i) A macro virus is platform independent.ii) Macro viruses infect documents, not executable portions of code.

#19. The type(s) of auto-executing macros, in Microsoft word, is/are __________.

#20. In ____________ the virus places an identical copy of itself into other programs or into certain system areas on the disk.

#21. A _________ is a program that secretly takes over another Internet-attached computer and then uses that computer to launch attacks.

#22. Which of the following are the solutions to network security?i) Encryptionii) Authenticationiii) Authorizationiv) Non-repudiation

#23. __________ is to protect data and passwords.

#24. The following protocols and systems are commonly used to provide various degrees of security services in a computer networks.i) IP filteringii)Reverse Address Translationiii) IP security Architecture (IPsec)iv) Firewallsv) Socks

#25. A firewall is installed at the point where the secure internal network and untrusted external network meet which is also known as____________.

#26. Which of the following is / are the types of firewall?

#27. The components of IP security includes _____________.

#28. ______________ Is used to carry traffic of one protocol over a network that does not support that protocol directly.

#29. In _____________ Mode, the authentication header is inserted immediately after the IP header.

#30. State true or false. i) Socks are a standard for circuit-level gateways.ii) The NAT is used for a small number of the hosts in a

#31. A ____________ is an extension of an enterprise’s private intranet across a public Network such as the Internet across a public Network such as the Internet, creating a secure private connection.

#32. The primary goal of the __________ protocol is to provide a private channel between communicating application, which ensures privacy of data authentication of the partners, and integrity.

#33. The ___________ is used to provide integrity check, authentication and encryption to IP datagram.

#34. In ___________mode, a common technique in packet-switched networks consists of wrapping a packet in a new one.

#35. The ___________Is a collection of protocols designed by Internet Engineering Task Force(IETF) to provide security for a packet at the Network level.

#36. At the lower layer of SSL, a protocol for transferring data using a variety of predefined cipher and authentication combinations called the_____________.

#37. While initiating SSL session, the client code recognizes the SSL request and establishes a connection through TCP Part ____________To the SSL code on the server.

#38. On the upper layer of SSL, a protocol for initial authentication and transfer of encryption keys called the ____________.

#39. State whether the following statement is true.i) An application-level gateway is often referred to as a proxy.ii) In proxy, a direct connection is established between the client and the destination server.

#40. In the packet-filtering router, the following information can be external from the packet header.i) Source IP address ii) Destination IP address iii) TCP/UDP source port iv) ICMP message type v) TCP/UDP destination port

#41. ___________ Mode is used whenever either end of a security association is the gateway.

#42. Why would a hacker use a proxy server?

#43. What type of symmetric key algorithm using a streaming cipher to encrypt information?

#44. Which of the following is not a factor in securing the environment against an attack on security?

#45. What type of attack uses a fraudulent server with a relay address?

#46. What port is used to connect to the Active Directory in Windows 2000?

#47. To hide information inside a picture, what technology is used?

#48. Which phase of hacking performs an actual attack on a network or system?

#49. Attempting to gain access to a network using an employee’s credentials is called the _____________ mode of ethical hacking.

#50. Which Federal Code applies the consequences of hacking activities that disrupt subway transit systems?

#51. Which of the following is not a typical characteristic of an ethical hacker?

#52. What is the proper command to perform a Nmap XMAS scan every 15seconds?

#53. What type of rootkit will patch, hook, or replace the version of system call in order to hide information?

#54. What is the purpose of a Denial of Service attack?

#55. What are some of the most common vulnerabilities that exist in a network or system?

#56. What is the sequence of a TCP connection?

#57. What tool can be used to perform SNMP enumeration?

#58. Which ports should be blocked to prevent null session enumeration?

#59. The first phase of hacking an IT system is compromise of which foundation of security?

#60. How is IP address spoofing detected?

#61. Why would a ping sweep be used?

#62. What are the port states determined by Nmap?

#63. What port does Telnet use?

#64. Which of the following will allow footprinting to be conducted without detection?

#65. Performing hacking activities with the intent on gaining visibility for an unfair situation is called ________.

#3. The type of threats on the security of a computer system or network are _________
i) Interruption
ii) Interception
iii) Modification
iv) Creation
v) Fabrication

#9. State whether true or false.
i) A worm mails a copy of itself to other systems.
ii) A worm executes a copy of itself on another system.

#12. Select the correct order for the different phases of virus execution.
i) Propagation phase
ii) Dormant phase
iii) Execution phase
iv) Triggering phase

#18. State whether the following statement is true.
i) A macro virus is platform independent.
ii) Macro viruses infect documents, not executable portions of code.

#22. Which of the following are the solutions to network security?
i) Encryption
ii) Authentication
iii) Authorization
iv) Non-repudiation

#24. The following protocols and systems are commonly used to provide various degrees of security services in a computer networks.
i) IP filtering
ii)Reverse Address Translation
iii) IP security Architecture (IPsec)
iv) Firewalls
v) Socks

#30. State true or false.
i) Socks are a standard for circuit-level gateways.
ii) The NAT is used for a small number of the hosts in a

#39. State whether the following statement is true.
i) An application-level gateway is often referred to as a proxy.
ii) In proxy, a direct connection is established between the client and the destination server.

#40. In the packet-filtering router, the following information can be external from the packet header.
i) Source IP address
ii) Destination IP address
iii) TCP/UDP source port
iv) ICMP message type
v) TCP/UDP destination port