Sra 221 - Chapter 15 (Part 1)

Front 1

A malicious proxy could create a(n) _______________ attack.

Back 1

Man-in-the-middle

Front 2

Changing a source IP address for malicious purpose is an example of _______________.

Back 2

Spoofing

Front 3

Abusing the TCP handshake in an effort to overuse server resources can be done using a(n) _______________.

Back 3

SYN Flood

Front 4

The main TCP/IP defense against a man-in-the-middle attack is the use of a(n) _______________.

Back 4

Sequence number

Front 5

A(n) _______________ is a way back into a machine via an unauthorized channel of access.

Back 5

Backdoor

Front 6

A NIC can be set in promiscuous mode to enable _______________.

Back 6

Sniffing

Front 7

When a keylogger is installed as malware, it is referred to as _______________.

Back 7

Spyware

Front 8

Rendering a resource useless is called a(n) _______________.

Back 8

Denial of Service(DoS) attack

Front 9

An attack designed to match any user's password as opposed to a specific user's password is an example of a(n) _______________.

Back 9

Birthday attack

Front 10

Holding a DNS name without paying is called _______________.

Back 10

DNS kiting

Front 11

The first step in an attack on a computer system consists of:

Back 11

Obtaining as much information about the organization in which the target lies as possible

Front 12

An attack in which the attacker simply listens for all traffic being transmitted across a network, in the hope of viewing something such as a user ID and password combination, is known as:

Back 12

A Sniffing attack

Front 13

A SYN flood is an example of what type of attack?

Back 13

Denial-of-service

Front 14

Which attack takes advantage of a trusted relationship that exists between two systems?

Back 14

Spoofing

Front 15

Rootkits are challenging security problems because:

Back 15

A) Their true functionality can be cloaked, preventing analysis
B) They can be invisible to the operating system and end user
D) They can do virtually anything an operating system can do

Front 16

The trick in TCP/IP hijacking is in trying to:

Back 16

Maintain the correct sequence numbers for the response packets

Front 17

In what type of attack does an attacker resend the series of commands and codes used in a financial transaction to cause the transaction to be conducted multiple times?

Back 17

Replay