WGU C836 Exam 3 Questions with 100%
Correct Answers.
Packet Filtering
a technique by firewall to allow/block certain types of network traffic based on the IP, port, and
protocol being used.
Statefull Firewall
Keeps track of the connection state and will only allow traffic that is part of a new or already
established connection
Deep Packet Inspection (DPI)
Analyzing the actual content of the traffic that is flowing through them.
Proxy Servers (proxies)
Provides a layer of security serving as a choke point, allowing us to filter and inspect traffic for
attacks or undesirable content
RAID
a data storage virtualization technology that combines multiple physical disk drive components
into a single logical unit for the purposes of data redundancy, performance improvement, or
both.
network intrusion detection system (NIDS)
A type of IDS that attempts to detect malicious network activities—for example, port scans and
DoS attacks—by constantly monitoring network traffic.
Nessus
Vulnerability Assessment Tools, a tool that can be used for port scanning, which is a way to
check for open ports on a system. It helps identify any potential vulnerabilities that could be
exploited by an attacker.
Buffer Overflow
, Vulnerability that occurs when we do not properly store the size of the data input into our
applications, causing the program to crash and an attacker to take advantage
Race Condition
results when several threads try to access and modify the same data
-difficult to detect in existing software, hard to reproduce
SQL Injection
An attack that targets SQL servers by injecting commands to be manipulated by the database.
(Server-side attack)
(OS hardening)
(Nessus port scanning)
Cross-Site Scripting (XSS)
An attack carried out by placing code in the form of a scripting language into a Web page, or
other media, that is interpreted by a client browser, including Adobe Flash animation and some
types of video files
Web application analysis tool
A type of tool that analyzes web pages or web-based applications and searches for common
flaws such as XSS or SQL injection flaws, and improperly set permissions, extraneous files,
outdated software versions, and many more such items
(Nikto & Burp Suite)
Fuzzers
a tool that can be used to test the security of a system by sending it unexpected input. The goal of
using a fuzzer is to find vulnerabilities or weaknesses in a system by causing it to crash or
behave in unexpected ways.
BinScope Binary Analyzer
A tool developed by Microsoft to examine source code for general good practices
Nikto (and Wikto)
Correct Answers.
Packet Filtering
a technique by firewall to allow/block certain types of network traffic based on the IP, port, and
protocol being used.
Statefull Firewall
Keeps track of the connection state and will only allow traffic that is part of a new or already
established connection
Deep Packet Inspection (DPI)
Analyzing the actual content of the traffic that is flowing through them.
Proxy Servers (proxies)
Provides a layer of security serving as a choke point, allowing us to filter and inspect traffic for
attacks or undesirable content
RAID
a data storage virtualization technology that combines multiple physical disk drive components
into a single logical unit for the purposes of data redundancy, performance improvement, or
both.
network intrusion detection system (NIDS)
A type of IDS that attempts to detect malicious network activities—for example, port scans and
DoS attacks—by constantly monitoring network traffic.
Nessus
Vulnerability Assessment Tools, a tool that can be used for port scanning, which is a way to
check for open ports on a system. It helps identify any potential vulnerabilities that could be
exploited by an attacker.
Buffer Overflow
, Vulnerability that occurs when we do not properly store the size of the data input into our
applications, causing the program to crash and an attacker to take advantage
Race Condition
results when several threads try to access and modify the same data
-difficult to detect in existing software, hard to reproduce
SQL Injection
An attack that targets SQL servers by injecting commands to be manipulated by the database.
(Server-side attack)
(OS hardening)
(Nessus port scanning)
Cross-Site Scripting (XSS)
An attack carried out by placing code in the form of a scripting language into a Web page, or
other media, that is interpreted by a client browser, including Adobe Flash animation and some
types of video files
Web application analysis tool
A type of tool that analyzes web pages or web-based applications and searches for common
flaws such as XSS or SQL injection flaws, and improperly set permissions, extraneous files,
outdated software versions, and many more such items
(Nikto & Burp Suite)
Fuzzers
a tool that can be used to test the security of a system by sending it unexpected input. The goal of
using a fuzzer is to find vulnerabilities or weaknesses in a system by causing it to crash or
behave in unexpected ways.
BinScope Binary Analyzer
A tool developed by Microsoft to examine source code for general good practices
Nikto (and Wikto)
