Exam 1: Operating Systems Security: Keeping Computers and Networks Secure

Once an attacker has found available IP addresses, they may then run ____________________ software to find a system on which a key port is open or not in use.

What application protocol is being used in the figure above?

Do the operating system device drivers coordinate operating system functions such as control of memory and storage?

What port does DNS use?

Employing disaster recovery is vital when a hard disk is damaged or crashes and must be replaced.

What type of port might be used during a port-scanning attack?

List five organizations that provide information, assistance, and training in types of system attacks and how to prevent them.

Will a security policy help to overcome the human factors that diminish security in an organization?

The ____________________ communicates with the BIOS, device drivers, and the API to perform operating system functions such as control of memory and storage.

Which of the following components are found in section A in the figure above?

Attackers may get through a specific NAT device by using a form of source routing called _____.

Which organization offers training in security needs and hosts the Certified Protection Professional certification?

In a source routing attack, the attacker modifies the _____ and routing information to make a packet appear to come from a different source, such as one that is already trusted for communications on a network.

Which of the following is a cost of deploying security within an organization?

WEP is a wireless communications authentication method.

____________________ is a TCP/IP protocol that provides terminal emulation services over a network or the Internet.

List four hardening techniques that can be used with networks.

What type of attack has occurred when a logged-on computer is used when that person is not present?

Which of the following information about us should be kept private?

Source routing attacks are used to interfere with normal access to a network host, Web site, or service by flooding a network with useless information.