Security Plus Chapter 4

Front 1

What is Social Engineering?

Back 1

A hacker trying to trick an employee into compromising security through social contact such as a phone call or e-mail message.

Front 2

Six types of social engineering attacks are?

Back 2

1. Impersonation (Session Highjacking)
   
2. Phishing
3. Shoulder Surfing or Dumpster Diving
4. Tailgating
5. Hoaxes
6. Whaling and Vishing
   

Front 3

Reasons why Social engineering is effective.

Back 3

1. Authority
2. Intimidation
3. Consensus/Social Proof
4. Scarcity
5. Urgency
6. Familiarity
7. Trust
   

Front 4

Name four types of Network Attacks?

Back 4

1. Denial of Service (DoS): Overloading the system
2. Distributed (DDoS): Uses systems i.e. smurf
   
3. Spoofing: Fakes IP, MAC, E-mail to fool user
   
4. Eavesdropping: sniffs packets for viewing
   
5. Man-in-the-Middle: Inserts self between 2 systems (MiTM)
   

Front 5

Name three types of Spoofing packets?

Back 5

1. Nemesis: Linux Spoofs ARP and TCP packets
2. Hping2: Linux Spoofs creates ping packets
3. Macchanger: Linux Spoofs MAC addresses
   

Front 6

Two Types of Poisoning are?

Back 6

1. DNS is when the DNS Servers entries names point to incorrect IP addresses. The locale DNS cache is also corrupted so that the client receives incorrect IPs. (Pharming)
2. ARP IP->MAC stores in memory ARP cache. The default Gateway IP is stored there and can be highjacked a.k.a. MiTM

Front 7

The LMhost file is used to?

Back 7

Resolve NetBIOS names to IP addresses.

Front 8

What is Spoofing?

Back 8

A spoof attack is when hacker modifies the source address of the packet. IPs, Macs, and email address can be spoofed.

Front 9

Name two methods to prevent ARP poisoning?

Back 9

1. Static ARP entries
   
2. Physical Security
   

Front 10

Name one methods to prevent DNS poisoning?

Back 10

Patching

Front 11

What is Domain kiting?

Back 11

Hacker uses the five day grace period over and over again without paying.

Front 12

What is Cross Scripting (XSS)?

Back 12

Inserting script code into a web page of that processes are re-directed to the hackers page.

Front 13

What is the difference between Blue-jacking and Blue-snarfing?

Back 13

Blue-jacking is text message and Blue-snarfing uses blue tooth devices.