Security+ (Sy0-401) Practice Test 8/12

Front 1

Which of the following answers apply to smurf attack? (Select 3)

Back 1

IP spoofing / DDoS /

Large amount of ICMP echo replies

Front 2

A fraudulent email requesting its recipient to reveal sensitive information (e.g. user name and password) used later by an attacker for the purpose of identity theft is an example of: (Select 2)

Back 2

Phishing / Social engineering

Front 3

Unsolicited messages received over an instant messaging system are known as:

Back 3

SPIM

Front 4

Using a telephone system to manipulate user into disclosing confidential information is called:

Back 4

Vishing

Front 5

Phishing scams targeting a specific group of users are referred to as:

Back 5

Spear phishing

Front 6

Which of the following answers apply to xmas attack? (Select 2)

Back 6

DOS attack / Port scan

Front 7

Which of the following answers list(s) the characteristic features of pharming?

(Select 2)

Back 7

DNS poisoning / Domain spoofing

Front 8

DNS translates:

Back 8

Domain names into IP addresses

Front 9

Which of the following answers refers to a DNS poisoning attack?

Back 9

Pharming

Front 10

Address Resolution Protocol (ARP) translates:

Back 10

- IP addresses into MAC addresses

-Network layer addresses into link layer addresses

Front 11

Which of the following exploits takes advantage of the spoofed MAC address?

Back 11

ARP poisoning

Front 12

Which of the following password attacks requires the most computing power?

Back 12

Brute force

Front 13

Which of the following password attacks takes advantage of a predefined list of words?

Back 13

Dictionary attack

Front 14

Rainbow tables are lookup tables used to speed up the process of password guessing.

(True / False)

Back 14

True

Front 15

Which of the following answers refers to the contents of a rainbow table entry?

Back 15

Hash / Password

Front 16

The term "typo squatting" refers to a practice of registering misspelled domain name closely resembling other well established and popular domain name in hopes of getting Internet traffic from users who would make errors while typing in the web address in their browsers. (True / False)

Back 16

True

Front 17

URL hijacking is also referred to as:

Back 17

Typo squatting

Front 18

Which of the following countermeasures prevent shoulder surfing? (Select 2)

Back 18

Privacy filters / Screensavers

Front 19

A policy enforcing the use of paper shredder for all discarded documents would be a countermeasure against:

Back 19

Dumpster diving

Front 20

What is tailgating?

Back 20

Gaining unauthorized access to restricted areas by following another person

Front 21

Phishing scams targeting people holding high positions in an organization or business are known as:

Back 21

Whaling

Front 22

Which of the following fall(s) into the category of social engineering attacks? (Select 3)

Back 22

Whaling / Spear phishing / Vishing

Front 23

Which of the following terms refers to a rogue access point?

Back 23

Evil Twin

Front 24

The term "war driving" refers to:

Back 24

Scanning for unsecured wireless networks while driving in a car

Front 25

The practice of sending unsolicited messages over Bluetooth is known as:

Back 25

Bluejacking