Ch 5 - Networking & Server Attacks

1

A buffer overflow attack occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer.

1

A DNS amplification attack floods an unsuspecting victim by redirecting valid responses to it.

1

An attack in which the attacker attempts to impersonate the user by using his or her session token is known as:

1

An attack that takes advantage of the procedures for initiating a session is known as what type of attack?

1

A SYN flood attack broadcasts a network request to multiple computers but changes the address from which the request came to the victim's computer.

1

Choose the SQL injection statement example below that could be used to find specific users:

1

How can an attacker substitute a DNS address so that a computer is automatically redirected to another device?

1

If an attacker purchases and uses a URL that is similar in spelling and looks like a well-known web site in order for the attacker to gain Web traffic to generate income, what type of attack are they using?

1

In an integer overflow attack, an attacker changes the value of a variable to something outside the range that the programmer had intended by using an integer overflow.

1

On a compromised computer, you have found that a user without administrative privileges was able to perform a task limited to only administrative accounts. What type of exploit has occurred?

1

Securing web applications is easier than protecting other systems.

1

The exchange of information among DNS servers regarding configured zones is known as:

1

The malicious content of an XSS URL is confined to material posted on a website

1

The return address is the only element that can be altered in a buffer overflow attack.

1

Traditional network security devices can block traditional network attacks, but they cannot always block web application attacks.

1

What are the two types of cross-site attacks? (Choose all that apply.)

1

What attack occurs when a domain pointer that links a domain name to a specific web server is changed by a threat actor?

1

What criteria must be met for an XXS attack to occur on a specific website?

1

What language below is used to view and manipulate data that is stored in a relational database?

1

What protocol can be used by a host on a network to find the MAC address of another device based on an IP address?

1

What specific ways can a session token be transmitted? (Choose all that apply.)

1

What technology expands the normal capabilities of a web browser for a specific webpage?

1

What two locations can be a target for DNS poisoning? (Choose all that apply.)

1

What type of additional attack does ARP spoofing rely on?

1

What type of an attack is being executed if an attacker substituted an invalid MAC address for the network gateway so no users can access external networks?

1

What type of attack intercepts communication between parties to steal or manipulate the data?

1

What type of attack is being performed when multiple computers overwhelm a system with fake requests?

1

What type of privileges to access hardware and software resources are granted to users or devices?

1

What type of web server application attacks introduce new input to exploit a vulnerability?

1

When an attacker promotes themselves as reputable third-party advertisers to distribute their malware through the Web ads, what type attack is being performed?

1

When an attack is designed to prevent authorized users from accessing a system, it is called what kind of attack?

1

When TCP/IP was developed, the host table concept was expanded into a hierarchical name system for matching computer names and numbers using this service:

1

Where are MAC addresses stored for future reference?

1

Which of the following are considered to be interception attacks? (Choose all that apply.)

1

Which SQL injection statement example below could be used to discover the name of the table?

1

Which SQL statement represents a SQL injection attempt to determine the names of different fields in a database?

1

Which type of attack below is similar to a passive man-in-the-middle attack?

1

Which type of attack broadcasts a network request to multiple computers but changes the address from which the request came to the victim's computer?

1

XSS is like a phishing attack but without needing to trick the user into visiting a malicious website.

Ch 5 quiz

Ch 5 - Networking & Server Attacks

A buffer overflow attack occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer.

A DNS amplification attack floods an unsuspecting victim by redirecting valid responses to it.

An attack in which the attacker attempts to impersonate the user by using his or her session token is known as:

An attack that takes advantage of the procedures for initiating a session is known as what type of attack?

A SYN flood attack broadcasts a network request to multiple computers but changes the address from which the request came to the victim's computer.

Choose the SQL injection statement example below that could be used to find specific users:

How can an attacker substitute a DNS address so that a computer is automatically redirected to another device?

If an attacker purchases and uses a URL that is similar in spelling and looks like a well-known web site in order for the attacker to gain Web traffic to generate income, what type of attack are they using?

In an integer overflow attack, an attacker changes the value of a variable to something outside the range that the programmer had intended by using an integer overflow.

On a compromised computer, you have found that a user without administrative privileges was able to perform a task limited to only administrative accounts. What type of exploit has occurred?

Securing web applications is easier than protecting other systems.

The exchange of information among DNS servers regarding configured zones is known as:

The malicious content of an XSS URL is confined to material posted on a website

The return address is the only element that can be altered in a buffer overflow attack.

Traditional network security devices can block traditional network attacks, but they cannot always block web application attacks.

What are the two types of cross-site attacks? (Choose all that apply.)

What attack occurs when a domain pointer that links a domain name to a specific web server is changed by a threat actor?

What criteria must be met for an XXS attack to occur on a specific website?

What language below is used to view and manipulate data that is stored in a relational database?

What protocol can be used by a host on a network to find the MAC address of another device based on an IP address?