CNIT 270 — Final
What protocol is on port 20-21? - Answer-FTP
What protocol is on port 22? - Answer-SSH
What protocol is on port 23? - Answer-Telnet
What protocol is on port 25? - Answer-SMTP
What protocol is on port 53? - Answer-DNS
What protocol is on port 80? - Answer-HTTP
What protocol is on port 443? - Answer-HTTPS
What protocol is on port 8080? - Answer-HTTP Proxy
What protocol is on port 110? - Answer-POP3
What protocol is on port 137-139? - Answer-NetBIOS
,What protocol is on port 464? - Answer-Kerberos
What protocol is on port 1812-1813? - Answer-RADIUS
TRUE/FALSE
Application proxies at the network boundary do not serve as perimeter defense. - Answer-FALSE
Applications proxies at the network boundary CAN function as perimeter defense.
Which transport layer protocol provides connection-oriented, reliable delivery service? - Answer-TCP
Which transport layer protocol provides unreliable, connectionless service? - Answer-UDP
What is an example of UDP traffic? - Answer-video streaming
What is stored in the /etc/passwd database? - Answer-user information
username | UID | GUID | password
Where are passwords stored in Linux systems? - Answer-/etc/shadow
plaintext or hashed
Who has stolen large sums of data from the United States? - Answer-China
, What does the General Data Protection Regulation (GDPR) essentially say? - Answer-If you want your
data removed, a company must do it
"right to be forgotten"
TRUE/FALSE
If you run John the Ripper against a wordlist, and the password is not in that wordlist, John will
eventually terminate itself. - Answer-FALSE
John will run forever if password is not in specific word list; keeps trying to find password in the list
What can be used to find what information is publicly available about you? - Answer-Open-source
intelligence (OSINT) scans
What is the most common attack with the goal of bulk data extraction? - Answer-SQL injection attacks
With SQL injection, data is tricked to be treated as _________ - Answer-code
What are the SQL injection types? - Answer-SQLi
HTML
BASH/SHELL
XSS
Insider threat (data leak, phishing)
In SQL injection attacks, where does the vulnerability lay? - Answer-In the website app; NOT the DBMS
What protocol is on port 20-21? - Answer-FTP
What protocol is on port 22? - Answer-SSH
What protocol is on port 23? - Answer-Telnet
What protocol is on port 25? - Answer-SMTP
What protocol is on port 53? - Answer-DNS
What protocol is on port 80? - Answer-HTTP
What protocol is on port 443? - Answer-HTTPS
What protocol is on port 8080? - Answer-HTTP Proxy
What protocol is on port 110? - Answer-POP3
What protocol is on port 137-139? - Answer-NetBIOS
,What protocol is on port 464? - Answer-Kerberos
What protocol is on port 1812-1813? - Answer-RADIUS
TRUE/FALSE
Application proxies at the network boundary do not serve as perimeter defense. - Answer-FALSE
Applications proxies at the network boundary CAN function as perimeter defense.
Which transport layer protocol provides connection-oriented, reliable delivery service? - Answer-TCP
Which transport layer protocol provides unreliable, connectionless service? - Answer-UDP
What is an example of UDP traffic? - Answer-video streaming
What is stored in the /etc/passwd database? - Answer-user information
username | UID | GUID | password
Where are passwords stored in Linux systems? - Answer-/etc/shadow
plaintext or hashed
Who has stolen large sums of data from the United States? - Answer-China
, What does the General Data Protection Regulation (GDPR) essentially say? - Answer-If you want your
data removed, a company must do it
"right to be forgotten"
TRUE/FALSE
If you run John the Ripper against a wordlist, and the password is not in that wordlist, John will
eventually terminate itself. - Answer-FALSE
John will run forever if password is not in specific word list; keeps trying to find password in the list
What can be used to find what information is publicly available about you? - Answer-Open-source
intelligence (OSINT) scans
What is the most common attack with the goal of bulk data extraction? - Answer-SQL injection attacks
With SQL injection, data is tricked to be treated as _________ - Answer-code
What are the SQL injection types? - Answer-SQLi
HTML
BASH/SHELL
XSS
Insider threat (data leak, phishing)
In SQL injection attacks, where does the vulnerability lay? - Answer-In the website app; NOT the DBMS
