cs6262 – quizzes with complete
solutions
T/F: an attacker that uses a large botnet to make requests to a server to flood is an
example of an amplification attack ANSWERS true
T/F: unlike UDP, TCP has the necessary safeguards in place to prevent network DoS
ANSWERS false
which of the following actors are part of the cyber crime underground economy?
- exploit developers
- botnet masters
- spammers ANSWERS all of the above
which of the following is/are not a potential network DoS mitigation?
- client puzzles
- captchas
- source identification
- use only TCP
- increase UDP 3-way handshake ANSWERS - captchas
- use only TCP
- increase UDP 3-way handshake
T/F: in 2015, github was a victim of a DDoS attack; the attackers injected malicious JS
code in github's web pages ANSWERS false; the malicious JS was on infected
popular sites that then targeted github through the user visiting those sites
which of the following is not used for scanning in a penetration test?
- nmap
- john the ripper
- icmpenum
- fping ANSWERS john the ripper
a security company controls two websites: "goodsecurity.com" and "learnhacking.com";
a web page from "goodsecurity.com" wants to access content from the server of
"learnhacking.com" - which mechanism can be used by the developers at
"learnhacking.com" to allow the other site to access their content?
- ANSWERS cross origin resource sharing; allows a server to indicate other
origins from which a browser should permit loading of resources - when a user from
"goodsecurity.com" sends a request to the other site, "learnhacking.com" will send a
, header called "Access-control-allow-origin: goodsecurity.com", which will allow it so
access the contents of the site from the user browser
which of the following is/are social engineering techniques?
- impersonation of help desk
- email attachments
- tailgating
- pop-up windows ANSWERS all of the above
T/F: subresource integrity uses cryptographic hash to make sure that a web page
subresources are delivered without changes ANSWERS true
cookie 1 information: 'name=cookie1; domain: cs6262.gatech.com; path= /canvas'
cookie 2 information: 'name=cookie2; domain: cs6262.gatech.edu; path: /'
which of the following is true?
- since both cookies have the same path, the browser can send cookie1 to both
domains
- the browser can send cookie2 to mail.cs6262.gatech.edu host
- cs6262.gatech.com can access the cookie2 since .com top-level domain takes higher
precedence than the .edu TLD ANSWERS the browser can send cookie2 to
mail.cs6262.gatech.edu host - cookie2 is available to all domains that end with
cs6262.gatech.edu and all the paths as the cookie does not have path restrictions
http://goodsecurity.com can access DOM for which of the following origins under the
Same Origin Policy?
- http://goodsecurity.com:80/admin
- https://goodsecurity.com
- http://admin.goodsecurity.com/
- http://goodsecurity.com:8000/ ANSWERS http://goodsecurity.com:80/admin
T/F: cookies have integrity because a user cannot change and cannot delete cookie
values ANSWERS false
which of the following is not a recommendation for countering social engineering
attacks?
- limit information in auto-reply emails
- allow repairmen and visitors to walk around the office or sensitive areas without an
escort
- never disclose passwords
- question people you don't know ANSWERS allow repairmen and visitors to walk
around the office or sensitive areas
T/F: a website "http://gatech/edu" is able to set or overwrite cookies from the website
"https://gatech.edu"; the server is not able to distinguish the overwritten cookies from
the original cookies; this is an example of violating session integrity ANSWERS
true
solutions
T/F: an attacker that uses a large botnet to make requests to a server to flood is an
example of an amplification attack ANSWERS true
T/F: unlike UDP, TCP has the necessary safeguards in place to prevent network DoS
ANSWERS false
which of the following actors are part of the cyber crime underground economy?
- exploit developers
- botnet masters
- spammers ANSWERS all of the above
which of the following is/are not a potential network DoS mitigation?
- client puzzles
- captchas
- source identification
- use only TCP
- increase UDP 3-way handshake ANSWERS - captchas
- use only TCP
- increase UDP 3-way handshake
T/F: in 2015, github was a victim of a DDoS attack; the attackers injected malicious JS
code in github's web pages ANSWERS false; the malicious JS was on infected
popular sites that then targeted github through the user visiting those sites
which of the following is not used for scanning in a penetration test?
- nmap
- john the ripper
- icmpenum
- fping ANSWERS john the ripper
a security company controls two websites: "goodsecurity.com" and "learnhacking.com";
a web page from "goodsecurity.com" wants to access content from the server of
"learnhacking.com" - which mechanism can be used by the developers at
"learnhacking.com" to allow the other site to access their content?
- ANSWERS cross origin resource sharing; allows a server to indicate other
origins from which a browser should permit loading of resources - when a user from
"goodsecurity.com" sends a request to the other site, "learnhacking.com" will send a
, header called "Access-control-allow-origin: goodsecurity.com", which will allow it so
access the contents of the site from the user browser
which of the following is/are social engineering techniques?
- impersonation of help desk
- email attachments
- tailgating
- pop-up windows ANSWERS all of the above
T/F: subresource integrity uses cryptographic hash to make sure that a web page
subresources are delivered without changes ANSWERS true
cookie 1 information: 'name=cookie1; domain: cs6262.gatech.com; path= /canvas'
cookie 2 information: 'name=cookie2; domain: cs6262.gatech.edu; path: /'
which of the following is true?
- since both cookies have the same path, the browser can send cookie1 to both
domains
- the browser can send cookie2 to mail.cs6262.gatech.edu host
- cs6262.gatech.com can access the cookie2 since .com top-level domain takes higher
precedence than the .edu TLD ANSWERS the browser can send cookie2 to
mail.cs6262.gatech.edu host - cookie2 is available to all domains that end with
cs6262.gatech.edu and all the paths as the cookie does not have path restrictions
http://goodsecurity.com can access DOM for which of the following origins under the
Same Origin Policy?
- http://goodsecurity.com:80/admin
- https://goodsecurity.com
- http://admin.goodsecurity.com/
- http://goodsecurity.com:8000/ ANSWERS http://goodsecurity.com:80/admin
T/F: cookies have integrity because a user cannot change and cannot delete cookie
values ANSWERS false
which of the following is not a recommendation for countering social engineering
attacks?
- limit information in auto-reply emails
- allow repairmen and visitors to walk around the office or sensitive areas without an
escort
- never disclose passwords
- question people you don't know ANSWERS allow repairmen and visitors to walk
around the office or sensitive areas
T/F: a website "http://gatech/edu" is able to set or overwrite cookies from the website
"https://gatech.edu"; the server is not able to distinguish the overwritten cookies from
the original cookies; this is an example of violating session integrity ANSWERS
true
