WGU C702 FORENSICS AND NETWORK
INTRUSION EXAM TEST PAPER WITH
DETAILED QUESTIONS AND RELIABLE
ANSWERS
◉ Rainbow Table Attack:
Answer: A rainbow table is a precomputed table for reversing
cryptographic hash functions, usually for cracking password
hashes. Tables are usually used in recovering a plaintext password
up to a certain length consisting of a limited set of characters
◉ Rule-Based Attack:
Answer: attack where the attacker already has some information
about the password. The attacker can then write a rule so that the
password-cracking software will only generate passwords that
meet that particular rule.
◉ Brute-Force Attack:
Answer: This attack, the attacker tries every possible combination
of characters until the correct password is found. It's a very slow
method and takes a large amount of time for longer passwords
◉ Syllable Attack:
,Answer: A Syllable attack is the combination of both brute-force
attack and a dictionary attack. This attack is often used when the
password is a nonexistent word
◉ Hybrid Attack:
Answer: This attack is based on the dictionary attack. In this
attack, the program adds numbers and symbols to the words from
the dictionary
◉ Hashing Algorithm Lengths:
Answer: SHA-1: 160 Bits
SHA-512: 512 Bits
MD5: 128 Bits
CRC-32: 32 Bits
MD6: 512 Bits
◉ SQL Injection:
Answer: Is a code injection technique, used to attack data-driven
applications, in which malicious SQL statements are inserted into
an entry field for execution [Web Application]. SQL injection must
exploit a security vulnerability in an application's software, for
example, when user input is either incorrectly filtered for string
literal escape characters embedded in SQL statements or user
input is not strongly typed and unexpectedly executed. SQL
injection is mostly known as an attack vector for websites but can
be used to attack any type of SQL database
, ◉ Netstat Commands
Answer:
◉ Netstat
Answer: -a Displays all connections and listening ports;
-e Displays Ethernet statistics;
-n Displays addresses and port numbers in numerical form;
-r Displays the routing table;
-o Displays the owning process ID associated with each
connection;
◉ INFO2 File:
Answer: When a user deletes a file, it's not actually permanently
deleted. Instead, the file is copied into the recycle bin's systems
folder for further instructions in how to deal with the file. In this
case it's the INFO2 file
◉ SCSI [Small Computer System Interface]:
Answer: The Small Computer System Interface [SCSI] is a set of
parallel interface standards developed by the American National
Standards Institute [ANSI] for attaching printers, disk drives,
scanners and other peripherals to computers
◉ Hard drive Tracks:
INTRUSION EXAM TEST PAPER WITH
DETAILED QUESTIONS AND RELIABLE
ANSWERS
◉ Rainbow Table Attack:
Answer: A rainbow table is a precomputed table for reversing
cryptographic hash functions, usually for cracking password
hashes. Tables are usually used in recovering a plaintext password
up to a certain length consisting of a limited set of characters
◉ Rule-Based Attack:
Answer: attack where the attacker already has some information
about the password. The attacker can then write a rule so that the
password-cracking software will only generate passwords that
meet that particular rule.
◉ Brute-Force Attack:
Answer: This attack, the attacker tries every possible combination
of characters until the correct password is found. It's a very slow
method and takes a large amount of time for longer passwords
◉ Syllable Attack:
,Answer: A Syllable attack is the combination of both brute-force
attack and a dictionary attack. This attack is often used when the
password is a nonexistent word
◉ Hybrid Attack:
Answer: This attack is based on the dictionary attack. In this
attack, the program adds numbers and symbols to the words from
the dictionary
◉ Hashing Algorithm Lengths:
Answer: SHA-1: 160 Bits
SHA-512: 512 Bits
MD5: 128 Bits
CRC-32: 32 Bits
MD6: 512 Bits
◉ SQL Injection:
Answer: Is a code injection technique, used to attack data-driven
applications, in which malicious SQL statements are inserted into
an entry field for execution [Web Application]. SQL injection must
exploit a security vulnerability in an application's software, for
example, when user input is either incorrectly filtered for string
literal escape characters embedded in SQL statements or user
input is not strongly typed and unexpectedly executed. SQL
injection is mostly known as an attack vector for websites but can
be used to attack any type of SQL database
, ◉ Netstat Commands
Answer:
◉ Netstat
Answer: -a Displays all connections and listening ports;
-e Displays Ethernet statistics;
-n Displays addresses and port numbers in numerical form;
-r Displays the routing table;
-o Displays the owning process ID associated with each
connection;
◉ INFO2 File:
Answer: When a user deletes a file, it's not actually permanently
deleted. Instead, the file is copied into the recycle bin's systems
folder for further instructions in how to deal with the file. In this
case it's the INFO2 file
◉ SCSI [Small Computer System Interface]:
Answer: The Small Computer System Interface [SCSI] is a set of
parallel interface standards developed by the American National
Standards Institute [ANSI] for attaching printers, disk drives,
scanners and other peripherals to computers
◉ Hard drive Tracks:
