Network Scanning Techniques Quiz

<p>RST (D)</p> Signup and view all the answers

<p>IDLE/IPID Header Scan (D)</p> Signup and view all the answers

<p>Different values correlate to specific port statuses, revealing if the port is open or closed. (A)</p> Signup and view all the answers

<p>IDLE/IPID Header Scan (C)</p> Signup and view all the answers

<p>It is very difficult to detect. (D)</p> Signup and view all the answers

<p>To filter incoming and outgoing network traffic based on rules (C)</p> Signup and view all the answers

<p>Stateful Firewalls (A)</p> Signup and view all the answers

<p>Signature-Based Detection (B)</p> Signup and view all the answers

<p>By dividing a network into smaller subnets to limit visibility (B)</p> Signup and view all the answers

<p>To lure attackers away from real targets (D)</p> Signup and view all the answers

<p>Traffic Filtering (A)</p> Signup and view all the answers

<p>Both deceive attackers to collect information (A)</p> Signup and view all the answers

<p>To separate sensitive systems from general network traffic (D)</p> Signup and view all the answers

<p>They enable attackers to extract data and change configurations. (B)</p> Signup and view all the answers

<p>It responds to manager queries and sends traps for events. (A)</p> Signup and view all the answers

<p>Allow unrestricted SNMP traffic from external networks. (C)</p> Signup and view all the answers

<p>A single object instance. (A)</p> Signup and view all the answers

<p>SolarWinds Engineer’s Toolset (C)</p> Signup and view all the answers

<p>To consolidate information about network devices. (D)</p> Signup and view all the answers

<p>Easily guessed strings like 'admin' or 'user'. (C)</p> Signup and view all the answers

<p>SNMP Manager (B)</p> Signup and view all the answers

<p>Eavesdropping (A)</p> Signup and view all the answers

<p>The first to engage will be physically refreshed for the fight. (C)</p> Signup and view all the answers

<p>Identifying connections between entities (A)</p> Signup and view all the answers

<p>Disarm the attacker (C)</p> Signup and view all the answers

<p>Data types like domain names and IP addresses (A)</p> Signup and view all the answers

<p>Misleading the enemy about your capabilities and intentions. (A)</p> Signup and view all the answers

<p>Connecting diverse data points like DNS records (B)</p> Signup and view all the answers

<p>Deceive (D)</p> Signup and view all the answers

<p>Maltego Visualization (D)</p> Signup and view all the answers

<p>Distant (C)</p> Signup and view all the answers

<p>Utilizing Honeyd/Tarpit to fake services (B)</p> Signup and view all the answers

<p>Create an account and register for the Community Edition (C)</p> Signup and view all the answers

<p>Identifying names of employees in a target organization (B)</p> Signup and view all the answers

<p>To shift the problem to others or obscure accountability. (C)</p> Signup and view all the answers

<p>By automating complex information-gathering tasks (C)</p> Signup and view all the answers

<p>Installing smoke detectors (B)</p> Signup and view all the answers

<p>TFTP (D)</p> Signup and view all the answers

<p>It lacks authentication, making it vulnerable to unauthorized access. (B)</p> Signup and view all the answers

<p>Determining the type and version of a web server. (A)</p> Signup and view all the answers

<p>Using &quot;nc&quot; to send HTTP requests to a web server. (D)</p> Signup and view all the answers

<p>Modifying server banners to hide version information. (D)</p> Signup and view all the answers

<p>To identify users currently logged into a remote system. (C)</p> Signup and view all the answers

<p>TFTP lacks authentication, making it vulnerable to unauthorized access. (C)</p> Signup and view all the answers

<p>SFTP (C)</p> Signup and view all the answers

A method of gathering information by eavesdropping on conversations or listening in on phone calls.

This method involves observing people while they enter information like passwords or credit card details.

This technique focuses on searching through trash for discarded documents or information that can be used for malicious purposes.

This is a method of pretending to be someone else, often with an authority figure, to gain access to information or systems.

Maltego is a data mining tool used to analyze and visualize relationships between people, organizations, and information.

Strategies that aim to mislead attackers about the nature of the organization, its assets, or its activities.

Maltego displays data in a table format for analysis and filtering.

Maltego uses nodes (entities) and edges (connections) to visualize relationships between pieces of data.

Techniques used to make an attack less effective, such as using decoy targets or deploying fake servers to distract.

Employing security measures to directly resist an attack, like firewalls, intrusion detection systems, or access controls.

These are pieces of code that Maltego uses to access and connect data from different sources and build relationships.

Recognizing patterns of an attack and responding accordingly, like detecting suspicious activity or triggering alarms.

The idea that an attack can be more effectively addressed by making the attacker believe it's someone else's problem or not worth targeting.

A false target designed to attract an attacker's attention.

A type of computer system designed to waste an attacker's time and resources while providing little useful information.

Making an attack appear as if it is not worth targeting or that the attacker will not gain significant advantage.

Allows attackers to read network data without making changes. This is often used for passive reconnaissance.

Allow attackers to read and modify network data. This poses a higher risk of unauthorized control.

Mechanism where network devices send alerts (traps) to a monitoring tool like InterMapper.

A central system that collects network information from various devices.

Virtual database that organizes network information in a hierarchical structure for easy management.

Software application on the management station that displays network data, sends requests to devices, and processes responses or alerts.

Software running on a network device that responds to manager queries and sends alerts when events occur.

Software that runs on the management station and sends requests to devices.

A type of TCP scan where both the attacker and the target complete the three-way handshake, establishing a full connection. This scan can be easily detected by security software such as firewalls and intrusion detection systems.

A type of TCP scan that intentionally sends a RST (reset) packet instead of an ACK (acknowledgement) packet in the third step of the three-way handshake. This behavior allows detection of open ports by the absence of the RST packet.

A TCP scan where the attacker sends various TCP packets with different flags (urgent, push, and finish) to probe the target. The response to the packet determines whether the port is open or closed.

A TCP scan that sends a packet with the ACK flag set to the target. This scan targets the target's firewall instead of the port itself. Its purpose is to identify the presence and type of firewall, and it also provides information about port filtering on the firewall.

A type of TCP scan that leverages a zombie system to send packets to the target on behalf of the attacker. The attacker analyzes the target's response to the packets, considering their IPID value, to determine the status of the port. This technique is less likely to be detected by security systems.

Any attempt to identify open ports on a target system by sending specially crafted packets. It commonly involves using TCP flags and examining the responses to deduce port statuses.

A type of firewall that analyzes network packets and blocks those that don't match predefined rules, preventing unauthorized scans.

A type of firewall that keeps track of ongoing network connections and only allows packets that are part of established sessions.

A firewall that inspects traffic based on specific applications (like HTTP or DNS) and applies rules to block malicious activity.

A security tool that monitors network traffic for suspicious patterns and sends alerts to administrators.

A security tool that actively blocks malicious traffic based on detected patterns, preventing attacks.

Dividing a network into smaller subnets, making it harder for attackers to scan and map the entire network.

Decoy systems designed to attract and trap attackers, diverting them from real targets.

Fake data or resources placed within real systems to deceive attackers.

A simple file transfer protocol designed for quick file transfers. It utilizes UDP for faster transmission. It has minimal authentication requirements, needing only the filename for file operations.

This technique exploits TFTP's lack of authentication to gain access to potentially sensitive information. Examples include retrieving configuration files from vulnerable network devices or obtaining sensitive user information stored on a compromised machine.

It involves identifying the specific type and model of a web server and sometimes even the operating system it's running on. This information can be exploited to target vulnerabilities specific to that server type.

OpenSSL is a powerful tool that enables secure communication over the internet. It utilizes SSL/TLS protocols to encrypt data during transmission. You can utilize OpenSSL to identify web servers and their configurations by analyzing the responses they send.

This refers to the practice of hiding or obscuring the specific type and version of the web server software. This helps to reduce the risk of attackers targeting known server vulnerabilities.

This is a tool that analyzes and filters incoming web requests before they reach the web server. It helps to prevent malicious attacks and control access to web resources. It can even present misleading information to confuse attackers.

A protocol originally used for displaying users currently logged into a remote system. It is a simple information-sharing tool that can be used to identify active user sessions and their details.

A similar protocol to Rwho, but provides more detailed information about users. It reveals information like user idle time, session details, and other relevant information.