ITCS318 Long Quiz Reviewer

What type of attack occurs when data goes beyond the memory areas allocated to an application?

Which of the following statements describes a distributed denial of service (DDoS) attack?

Employees in an organization report that the network access is slow. Further investigation reveals that one employee downloaded a third-party scanning program for the printer. What type of malware may have been introduced?

Employees in an organization report that they cannot access the customer database on the main server. Further investigation reveals that the database file is now encrypted. Shortly afterward, the organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?

A penetration test carried out by an organization identified a backdoor on the network. What action should the organization take to find out if their systems have been compromised?

What non-technical method could a cybercriminal use to gather sensitive information from an organization?

A secretary receives a phone call from someone claiming that their manager is about to give an important presentation but the presentation files are corrupted. The caller sternly asks that the secretary email the presentation right away to a personal email address. The caller also states that the secretary is being held personally responsible for the success of this presentation. What type of social engineering tactic is the caller using?

All employees in an organization receive an email stating that their account password will expire immediately and that they should reset their password within five minutes. Which of the following statements best describes this email?

Which best practices can help defend against social engineering attacks? (Choose three.)

What do you call an impersonation attack that takes advantage of a trusted relationship between two systems?

A cybercriminal sends a series of maliciously formatted packets to a database server, which causes the server to crash. What do you call this type of attack?

The awareness and identification of vulnerabilities is a critical function of a cybersecurity specialist. Which of the following resources can they use to identify specific details about vulnerabilities?

Which security measure is typically found both inside and outside a data center facility?

What is hyperjacking?

Which statement accurately characterizes the evolution of threats to network security?

When considering network security, what is the most valuable asset of an organization?

Which resource is affected due to weak security settings for a device owned by the company, but housed in another location?

Refer to the exhibit. An IT security manager is planning security updates on this particular network. Which type of network is displayed in the exhibit and is being considered for updates?

What are two security features commonly found in a WAN design? (Choose two.)

Which security technology is commonly used by a teleworker when accessing resources on the main corporate office network?

Which technology is used to secure, monitor, and manage mobile devices?

Which field in an IPv6 packet is used by the router to determine if a packet has expired and should be dropped?

An attacker is using a laptop as a rogue access point to capture all network traffic from a targeted user. Which type of attack is this?

Which field in the IPv4 header is used to prevent a packet from traversing a network endlessly?

What is involved in an IP address spoofing attack?

Which type of attack involves the unauthorized discovery and mapping of network systems and services?

In which TCP attack is the cybercriminal attempting to overwhelm a target host with half-open TCP connections?

How is optional network layer information carried by IPv6 packets?

A threat actor wants to interrupt a normal TCP communication between two hosts by sending a spoofed packet to both endpoints. Which TCP option bit would the threat actor set in the spoofed packet?

A threat actor uses a program to launch an attack by sending a flood of UDP packets to a server on the network. The program sweeps through all of the known ports trying to find closed ports. It causes the server to reply with an ICMP port unreachable message and is similar to a DoS attack. Which two programs could be used by the threat actor to launch the attack? (Choose two.)

Which term describes a field in the IPv4 packet header used to detect corruption in the IPv4 header?

What kind of ICMP message can be used by threat actors to map an internal IP network?

Users in a company have complained about network performance. After investigation, the IT staff has determined that an attacker has used a specific technique that affects the TCP three-way handshake. What is the name of this type of network attack?

Which action best describes a MAC address spoofing attack?

What is an objective of a DHCP spoofing attack?

What is the primary means for mitigating virus and Trojan horse attacks?

What method can be used to mitigate ping sweeps?

What worm mitigation phase involves actively disinfecting infected systems?

What is the result of a DHCP starvation attack?

Which term is used for bulk advertising emails flooded to as many end users as possible?

Which type of DNS attack involves the cybercriminal compromising a parent domain and creating multiple subdomains to be used during the attacks?

Which protocol would be the target of a cushioning attack?

Which language is used to query relational database?

Which two attacks target web servers through exploiting possible vulnerabilities of input functions used by an application? (Choose two.)

In which type of attack is falsified information used to redirect users to malicious Internet sites?

What is a characteristic of a DNS amplification and reflection attack?

City Center Hospital provides WLAN connectivity to its employees. The security policy requires that communication between employee mobile devices and the access points must be encrypted. What is the purpose of this requirement?

What is a feature that can be used by an administrator to prevent unauthorized users from connecting to a wireless access point?