Question 1

Which of the following viruses could attach itself to the boot sector of your disk to avoid detection and report false information about file sizes?

Accepted Answer

A) Trojan Horse 
B) Stealth virus 
C) Polymorphic virus 
D) Worm 
A) Trojan Horse 
B) Stealth virus 
C) Polymorphic virus 
D) Worm B

Question 2

What are Zero-Day Exploits?

Accepted Answer

A) Software that hasn't come out yet 
B) Software used to exploit holes in targeted software before the developer is aware of the holes 
C) Vulnerability that no one has a change to exploit 
D) Software provided the day after the vulnerability is discovered to stop attack 
A) Software that hasn't come out yet 
B) Software used to exploit holes in targeted software before the developer is aware of the holes 
C) Vulnerability that no one has a change to exploit 
D) Software provided the day after the vulnerability is discovered to stop attack B

Question 3

Which of the following TCP attacks tweaks the TCP three-way handshake process in an attempt to overload network servers, resulting in authorized users being denied access to network resources?

Accepted Answer

A) Snooping 
B) Smurf attack 
C) SYN attack 
D) Man in the middle 
A) Snooping 
B) Smurf attack 
C) SYN attack 
D) Man in the middle C

Question 4

Which of the following is a term used to define a collection of software robots (bots) that run autonomously and automatically and may harm your computer?

Accepted Answer

A) Automizer 
B) Botnet 
C) Soft bots 
D) Root kit 
A) Automizer 
B) Botnet 
C) Soft bots 
D) Root kit

Question 5

What is a type of attack that uses social engineering and exploits a user's trust in telephone systems by spoofing caller ID and other telco tools?

Accepted Answer

A) Phishing 
B) Pharming 
C) Vishing 
D) Packet sniffing 
A) Phishing 
B) Pharming 
C) Vishing 
D) Packet sniffing

Question 6

Which of the following defines a condition that can occur when an application receives more data than it's programmed to accept?

Accepted Answer

A) Spoofing 
B) Buffer Overflow 
C) Spam 
D) Back door entry 
A) Spoofing 
B) Buffer Overflow 
C) Spam 
D) Back door entry

Question 7

What stealth software gives privileged rights to a machine without alerting Users or Administrators?

Accepted Answer

A) Root kit 
B) Virus 
C) Botnets 
D) Spyware 
A) Root kit 
B) Virus 
C) Botnets 
D) Spyware

Question 8

Which of the following transmission media is least susceptible to a vampire tap placed on the line?

Accepted Answer

A) Fiber 
B) Coaxial 
C) UTP 
D) STP 
A) Fiber 
B) Coaxial 
C) UTP 
D) STP

Question 9

What is a system that is intentionally set up with vulnerabilities to trap attackers?

Accepted Answer

A) Honey pot 
B) Virtual Environment 
C) DMZ 
D) IDS 
A) Honey pot 
B) Virtual Environment 
C) DMZ 
D) IDS

Question 10

Which of the following best describes domain name kiting?

Accepted Answer

A) It is a practice of hacking domain names. 
B) It is the practice of transferring domain names. 
C) It is the process of erasing the DNS records of a domain name. 
D) It is the practice of repeatedly registering and deleting a domain name so that in effect, the registrant can own the domain name without paying for it. 
A) It is a practice of hacking domain names. 
B) It is the practice of transferring domain names. 
C) It is the process of erasing the DNS records of a domain name. 
D) It is the practice of repeatedly registering and deleting a domain name so that in effect, the registrant can own the domain name without paying for it.

Question 11

What is intercepting data packets transmitted over wireless connections called?

Accepted Answer

A) Whaling 
B) Packet Sniffing 
C) Packet corralling 
D) Shoulder Surfing 
A) Whaling 
B) Packet Sniffing 
C) Packet corralling 
D) Shoulder Surfing

Question 12

Jack is investigating the cause of his company's failure in winning the bid for a project. He suspects that a hacker could have intervened in the communication session between his company's employees. Which of the following attack types is he investigating on?

Accepted Answer

A) Man-in-the-middle attack 
B) TCP/IP hijacking 
C) Back door attack 
D) Worm 
A) Man-in-the-middle attack 
B) TCP/IP hijacking 
C) Back door attack 
D) Worm

Question 13

Which of the following is a server placed in a corporate network for the purpose of attracting a potential intruder's attention?

Accepted Answer

A) Scanner 
B) NAT 
C) Firewall 
D) Honey pot 
A) Scanner 
B) NAT 
C) Firewall 
D) Honey pot

Question 14

Which of the following is a Bluetooth-based attack that relates to gaining unauthorized access through a Bluetooth connection?

Accepted Answer

A) Blue-theft 
B) Blue-access 
C) Blue jacking 
D) Bluesnarfing 
A) Blue-theft 
B) Blue-access 
C) Blue jacking 
D) Bluesnarfing

Question 15

What software displays itself as a useful or helpful program and turns out to be malicious instead of or in addition to the previous assumption?

Accepted Answer

A) Worm 
B) Trojan 
C) Logic Bomb 
D) Adware 
A) Worm 
B) Trojan 
C) Logic Bomb 
D) Adware

Question 16

John has detected a breach in security. A hacker is trying to access confidential data from the company's server. What should be done first?

Accepted Answer

A) Detach the server from the network and remove the network cable. 
B) Look for the hacker and penalize him. 
C) Restart the server. 
D) Shut down the server. 
A) Detach the server from the network and remove the network cable. 
B) Look for the hacker and penalize him. 
C) Restart the server. 
D) Shut down the server.

Question 17

David switched on his system and opened his messenger application. Surprisingly, a Word document opens up instead. What kind of an attack has probably occurred?

Accepted Answer

A) Sniffer attack 
B) Worm 
C) Virus 
D) Logic bomb 
A) Sniffer attack 
B) Worm 
C) Virus 
D) Logic bomb

Question 18

What are the terms used to describe when someone who is unauthorized sneaks past a security point by closely following the person in front of them without consent of the person in front of them?

Accepted Answer

A) Tailgating 
B) Piggybacking 
C) Leapfrogging 
D) Donkey Riding 
A) Tailgating 
B) Piggybacking 
C) Leapfrogging 
D) Donkey Riding

Question 19

Which of the following password-guessing attacks continue attacking until a successful guess occurs?

Accepted Answer

A) Guess attack 
B) Password guess attack 
C) Dictionary attack 
D) Brute force attack 
A) Guess attack 
B) Password guess attack 
C) Dictionary attack 
D) Brute force attack

Question 20

Which of the following terms describes the process of improving security?

Accepted Answer

A) Patching 
B) Compression 
C) Encryption 
D) Hardening 
A) Patching 
B) Compression 
C) Encryption 
D) Hardening

Exam 28: Threats

Which of the following viruses could attach itself to the boot sector of your disk to avoid detection and report false information about file sizes?

What are Zero-Day Exploits?

Which of the following TCP attacks tweaks the TCP three-way handshake process in an attempt to overload network servers, resulting in authorized users being denied access to network resources?

Which of the following is a term used to define a collection of software robots (bots) that run autonomously and automatically and may harm your computer?

What is a type of attack that uses social engineering and exploits a user's trust in telephone systems by spoofing caller ID and other telco tools?

Which of the following defines a condition that can occur when an application receives more data than it's programmed to accept?

What stealth software gives privileged rights to a machine without alerting Users or Administrators?

Which of the following transmission media is least susceptible to a vampire tap placed on the line?

What is a system that is intentionally set up with vulnerabilities to trap attackers?

Which of the following best describes domain name kiting?

What is intercepting data packets transmitted over wireless connections called?

Jack is investigating the cause of his company's failure in winning the bid for a project. He suspects that a hacker could have intervened in the communication session between his company's employees. Which of the following attack types is he investigating on?

Which of the following is a server placed in a corporate network for the purpose of attracting a potential intruder's attention?

Which of the following is a Bluetooth-based attack that relates to gaining unauthorized access through a Bluetooth connection?

What software displays itself as a useful or helpful program and turns out to be malicious instead of or in addition to the previous assumption?

John has detected a breach in security. A hacker is trying to access confidential data from the company's server. What should be done first?

David switched on his system and opened his messenger application. Surprisingly, a Word document opens up instead. What kind of an attack has probably occurred?

What are the terms used to describe when someone who is unauthorized sneaks past a security point by closely following the person in front of them without consent of the person in front of them?

Which of the following password-guessing attacks continue attacking until a successful guess occurs?

Which of the following terms describes the process of improving security?

Hardware

Laptops

Networking

Printers

Procedures

Other Operating Systems and Technologies

Mobile-Devices

Operating-Systems

Security

Troubleshooting

Access-Identity

Apps - Data - Host

Compliance-Op

Comptia Asp

Concepts

Cryptography

Dhti

Enrolled-Agent

Essentials

Install Configure

Linux

Management

Media Topologies

Network

Other-Operating-Systems-And-Technologies

Server

Software-Troubleshooting

Filters