ITN 261 FINAL EXAM NEWEST 2026 ACTUAL EXAM TEST
BANK| ITN 261 FINAL EXAM REVIEW WITH COMPLETE
350 REAL EXAM QUESTIONS AND CORRECT VERIFIED
ANSWERS/ ALREADY GRADED A+ (MOST RECENT!!)
Which of the following types of sniffing is performed in a network
where a switch is present?
Switch Sniffing
Active Sniffing
Passive Sniffing
Hub Sniffing ......ANSWER......Active Sniffing
Sniffers are a broad category that encompasses any utility that has the
ability to perform a packet-capturing function.
True
False ......ANSWER......True
An attacker (or pen tester) can change their MAC address to the MAC
address of an existing authenticated machine already on the network.
What is this concept called?
pg. 1
,MAC skimming
MAC spoofing
MAC flooding
MAC Sniffing ......ANSWER......MAC spoofing
Which of the following is NOT a sniffer?
Nmap
Tcpdump
Wireshark
Dsniff ......ANSWER......Nmap
Lawful interception (LI) is defined as legally accessing communications
and network data such as telephone calls or email messages. Another
term for LI is:
intruding
sniffing
wiretapping
hijacking ......ANSWER......wiretapping
Sniffing is the act of viewing information as it flows over the network.
pg. 2
,True
False ......ANSWER......True
Which of the following is NOT true in the context of a SYN flood attack?
Attacker responds with ACK reply to the server
Prevents legitimate users from accessing the server
Attacker floods server with SYN packets with spoofed source address
Server responds with SYN/ACK reply to fake source address
......ANSWER......Attacker responds with ACK reply to the server
One countermeasure towards SYN Flood attack is to limit the number of
half-open connections from a single IP.
True
False ......ANSWER......True
In ________________, the attacker transmits large ICMP packets (>
65,535 bytes) to victim host.
Big ICMP attack
Ping Reply attack
Ping of Death
pg. 3
, ICMP flood attack ......ANSWER......Ping of Death
A ______________________ occurs when a program or process tries to
store more data in a buffer (temporary data storage area) than it was
intended to hold.
phishing
buffer overflow
teardrop attack
land attack ......ANSWER......buffer overflow
Which of the following attacks refers to flooding a target with UDP
packets?
Smurf attack
ICMP attack
Land attack
Fraggle attack ......ANSWER......Fraggle attack
In DDoS attack, the attacker compromises multiple hosts. These
compromised systems are known as
bots or zombies
pg. 4
BANK| ITN 261 FINAL EXAM REVIEW WITH COMPLETE
350 REAL EXAM QUESTIONS AND CORRECT VERIFIED
ANSWERS/ ALREADY GRADED A+ (MOST RECENT!!)
Which of the following types of sniffing is performed in a network
where a switch is present?
Switch Sniffing
Active Sniffing
Passive Sniffing
Hub Sniffing ......ANSWER......Active Sniffing
Sniffers are a broad category that encompasses any utility that has the
ability to perform a packet-capturing function.
True
False ......ANSWER......True
An attacker (or pen tester) can change their MAC address to the MAC
address of an existing authenticated machine already on the network.
What is this concept called?
pg. 1
,MAC skimming
MAC spoofing
MAC flooding
MAC Sniffing ......ANSWER......MAC spoofing
Which of the following is NOT a sniffer?
Nmap
Tcpdump
Wireshark
Dsniff ......ANSWER......Nmap
Lawful interception (LI) is defined as legally accessing communications
and network data such as telephone calls or email messages. Another
term for LI is:
intruding
sniffing
wiretapping
hijacking ......ANSWER......wiretapping
Sniffing is the act of viewing information as it flows over the network.
pg. 2
,True
False ......ANSWER......True
Which of the following is NOT true in the context of a SYN flood attack?
Attacker responds with ACK reply to the server
Prevents legitimate users from accessing the server
Attacker floods server with SYN packets with spoofed source address
Server responds with SYN/ACK reply to fake source address
......ANSWER......Attacker responds with ACK reply to the server
One countermeasure towards SYN Flood attack is to limit the number of
half-open connections from a single IP.
True
False ......ANSWER......True
In ________________, the attacker transmits large ICMP packets (>
65,535 bytes) to victim host.
Big ICMP attack
Ping Reply attack
Ping of Death
pg. 3
, ICMP flood attack ......ANSWER......Ping of Death
A ______________________ occurs when a program or process tries to
store more data in a buffer (temporary data storage area) than it was
intended to hold.
phishing
buffer overflow
teardrop attack
land attack ......ANSWER......buffer overflow
Which of the following attacks refers to flooding a target with UDP
packets?
Smurf attack
ICMP attack
Land attack
Fraggle attack ......ANSWER......Fraggle attack
In DDoS attack, the attacker compromises multiple hosts. These
compromised systems are known as
bots or zombies
pg. 4
