20 Questions
What is the primary goal of social engineering?
To manipulate individuals into divulging confidential information
What is the main purpose of port scanning?
To discover open ports and services on a target system
What is the key objective of enumeration?
To query services and gather information after initial access
Why do attackers exploit operating system vulnerabilities?
To gain unauthorized access or disrupt system operations
What is the main purpose of DNS zone transfer?
To replicate DNS databases between servers
How can attackers exploit zone transfers?
To gather information about a target network's domain names and IP addresses
Which technique is NOT typically used in social engineering attacks?
Zone Transfer API requests
What is the main goal of Mod 6 Enumeration in cybersecurity?
To extract information about a target system, network, or application
What is the main purpose of a firewall?
To act as a barrier between trusted and untrusted networks
Which factor does a firewall use to determine whether to allow or block data packets?
Source and destination IP addresses
What is Wireshark primarily used for?
Capturing and browsing network traffic
What is a rootkit designed to do?
Gain unauthorized access to a computer system undetected
What is the primary purpose of a Traceroute tool?
Identifying the path packets take between two computers
Which tool is NOT typically used for port scanning?
Traceroute
What is the main objective of footprinting in cybersecurity?
Collecting data about target systems
Which functionality is NOT provided by CyberKit for footprinting?
Vulnerability assessment
Where do user-mode rootkits operate within the operating system?
At the user level
What makes kernel-level rootkits more challenging to detect compared to user-mode rootkits?
They have privileged access to system resources
How do rootkits infect a computer's boot process?
By modifying the master boot record (MBR)
What distinguishes hypervisor rootkits from other types of rootkits?
They target virtualized environments
Study Notes
Social Engineering
- The primary goal of social engineering is to manipulate individuals into divulging confidential or sensitive information.
- A technique NOT typically used in social engineering attacks is threats.
Port Scanning and Enumeration
- The main purpose of port scanning is to identify open ports and services on a network.
- The key objective of enumeration is to gather information about a system, such as user accounts, system permissions, and network shares.
Operating System Vulnerabilities
- Attackers exploit operating system vulnerabilities to gain unauthorized access to a system or network.
DNS Zone Transfer
- The main purpose of DNS zone transfer is to replicate DNS data between DNS servers.
- Attackers can exploit zone transfers to gain access to sensitive information about a network, such as DNS zone data.
Mod 6 Enumeration
- The main goal of Mod 6 Enumeration in cybersecurity is to gather information about a system, including network shares, user accounts, and system permissions.
Firewall
- The main purpose of a firewall is to control incoming and outgoing network traffic based on predetermined security rules.
- A firewall uses the source IP address, destination IP address, and port number to determine whether to allow or block data packets.
Network Tools
- Wireshark is primarily used for packet capturing and analysis.
- Traceroute is a tool used to track the path of network packets from a source to a destination.
Rootkits
- A rootkit is designed to hide malicious software and activities from the operating system and security software.
- User-mode rootkits operate within the application layer of the operating system.
- Kernel-level rootkits are more challenging to detect compared to user-mode rootkits because they operate at the kernel level, allowing them to manipulate system functions and data.
- Rootkits can infect a computer's boot process by modifying the Master Boot Record (MBR) or boot sectors.
- Hypervisor rootkits are distinguished from other types of rootkits because they operate at the hypervisor level, allowing them to control and manipulate the underlying operating system.
Footprinting
- The main objective of footprinting in cybersecurity is to gather information about a target system or network, such as network topology, system vulnerabilities, and open ports.
- CyberKit does not provide Whois lookup functionality for footprinting.
Test your knowledge on DNS zone transfer, a mechanism used for replicating DNS databases between servers, and learn about the potential security risks involved. Explore the functionality of Zone Transfer API for programmatically requesting DNS zone transfers.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
