Exam 28: Threats

John is a security advisor at his organization. A number of anonymous users are complaining about data being stolen from their computers. Which of the following should he enforce to avoid data theft?

John is a Security Administrator at his organization. He is observing repeated unsuccessful attempts from a hacker to submit a Kerberos certificate and have it be validated by the authentication system. What is this attack called?

Which of the following logs should you look for if you want to find out when the workstation was last shutdown?

What is the type of attack that gives the attacker the ability to see messages from both sides of the communication and can also interject other messages into the conversation as well?

David is the Security Administrator at his organization. He is investigating an issue where the corporate server will not accept any connections using the TCP protocol. On close inspection he sees that the server indicates that it has exceeded its session limit. Which type of attack is this?

An email that seems to come from the IT department requesting usernames and passwords is an example of what?

You are working as a Security Advisor at your organization. On observing an employee's system log files report, you notice unsuccessful ongoing attempts to gain access to a single user account on the computer. What is this attack called?

Which of the following attacks involves the attacker gaining access to a host on the network and logically disconnecting it?

What is a way for a hacker to redirect someone to a bogus website by exploiting DNS server vulnerabilities?

David is concerned about the security of his organization's web server. He wants to find and block all open, vulnerable ports on his web server. Which of the following tools should he use to find all open ports on the network?

Which of the following defines a condition that can occur when an application receives more data than it is programmed to accept?

Which protocol does the smurf attack use to attack a network or system?

Which of the following is a major difference between a Worm and a Trojan horse?

David has just switched on his system and opened a word document. Surprisingly, the dialer started dialing the internet. What kind of an attack has probably occurred?

John is investigating a situation where an internal user's PC has been hacked by another internal user in the organization. Which of the following locations should he check to determine the source of the attack?

What is a way of compromising the original software or application that can alter the logic of a XML Web page?