Written by students who passed Immediately available after payment Read online or as PDF Wrong document? Swap it for free 4.6 TrustPilot
logo-home
Document preview thumbnail
Preview 4 out of 32 pages
Exam (elaborations)

CNIT 455 Exam 3 | 230+ Exam Questions & Verified Answers | Software Vulnerabilities, Buffer Overflow, IDS, NAC & Cryptography | Purdue University

Document preview thumbnail
Preview 4 out of 32 pages

Prepare confidently for CNIT 455 Exam 3 with this comprehensive collection of 230+ exam questions and verified answers covering the core concepts of network security, secure software development, intrusion detection, network access control, cryptography, and vulnerability exploitation taught in Purdue University's Computer and Information Technology (CNIT 455) course. This exam study guide provides structured question-and-answer coverage of software vulnerabilities, reverse engineering, remote code execution (RCE) tools, buffer and heap overflow attacks, exploit techniques, denial-of-service (DoS/DDoS) attacks, reconnaissance, routing attacks, VLAN security, intrusion detection systems (IDS), Network Access Control (NAC), encryption algorithms, hashing, and message authentication codes, making it an ideal resource for exam preparation and technical review. The material is organized in a logical progression from software exploitation and network attacks through defensive technologies and modern cryptographic techniques. Students will review secure coding principles, vulnerability discovery methods, packet sniffing, ARP spoofing, SYN floods, routing protocol attacks (RIP, OSPF, EIGRP, and BGP), passive and active reconnaissance, rootkits, host-based and network-based IDS architectures, NAC deployment models, symmetric and asymmetric encryption, AES, DES, 3DES, block cipher modes, hash functions including MD5 and SHA families, and message authentication codes (MACs). The question-and-answer format reinforces technical terminology while helping students master concepts commonly assessed in cybersecurity and network defense examinations. The topics covered are consistent with widely recognized cybersecurity literature and industry references, including: William Stallings, Cryptography and Network Security: Principles and Practice (Pearson). Bruce Schneier, Applied Cryptography: Protocols, Algorithms, and Source Code in C (Wiley). Charlie Kaufman, Radia Perlman & Mike Speciner, Network Security: Private Communication in a Public World (Prentice Hall). NIST, FIPS 197: Advanced Encryption Standard (AES). NIST, Secure Hash Standard (FIPS 180-4). Microsoft Learn Documentation (Windows Security, Defender, IDS/NAC, and Cryptography). Relevant Students: Purdue University CNIT 455 students, Cybersecurity students, Computer and Information Technology students, Information Security students, Network Security students, Computer Science students, Digital Forensics students, Ethical Hacking students, Penetration Testing students, Information Assurance students, Systems Security students, students preparing for CNIT 455 Exam 3. Keywords: CNIT 455, Exam 3, software vulnerabilities, secure coding, reverse engineering, RCE, buffer overflow, heap overflow, overflow attacks, NOP sled, jump to register, exploit mitigation, Data Execution Prevention, packet sniffing, ARP spoofing, SYN flood, denial of service, DDoS, reconnaissance, network reconnaissance, operating system fingerprinting, TCP stack fingerprinting, rootkits, IDS, host-based IDS, network-based IDS, intrusion detection, intrusion prevention, NAC, network access control, 802.1X, DHCP attacks, VLAN attacks, VTP manipulation, routing attacks, RIP, OSPF, EIGRP, BGP, cryptography, symmetric encryption, asymmetric encryption, AES, DES, 3DES, block cipher modes, ECB, CBC, CTR, OFB, hash functions, MD5, SHA-1, SHA-256, SHA-512, message authentication code, HMAC, CBC-MAC, UMAC, cybersecurity, network security

Content preview

CNIT 455 Exam 3 2026 Exam
Questions and Correct
Answers | New Update



Software vulnerabilities are typically a result of what? - ANSWER

✔✔- non-secure coding


- "make it work first and secure it later" approach

How can vulnerabilities be discovered in open source code? -

ANSWER ✔✔- can be analyzed natively


How can vulnerabilities be discovered in closed source code? -

ANSWER ✔✔- must be reverse engineered


What are RCE tools? - ANSWER ✔✔- used by disassemblers to

convert binary to assembly language for analysis

,- means of understanding memory usage and basic logic flow of

application

- hex editors can be used to change constants/operations once memory

offset is found


What is an overflow attack? - ANSWER ✔✔- most common means of

running malware on a target

- occurs when application doesn't check length of input being placed into

variable or buffer

- always creates a problem


What is a buffer overflow? - ANSWER ✔✔- most commonly used

attack vector

- too much is put into a variable and the memory is overwritten

immediately following

- critical to keep Internet applications "boxed in" as a result

What is the process for exploiting an application buffer overflow? -

ANSWER ✔✔- redirect processor to memory be overflowed by

attacking stack (ie. arguments, return address, previous frame pointer,

local variables, buffer)

- overflow buffer to replace return address with address of planted code

,What are some examples of buffer overflow attacks? - ANSWER ✔✔-

NOP sled

- jump to register


What is a NOP sled? - ANSWER ✔✔- oldest and most widely used

technique

- series of hoops with jump at end of shellcode is written

- increases likelihood of hitting exploit code in stack

- modern IDS systems look for this type of attack


What is a jump to register buffer overflow attack? - ANSWER ✔✔-

jump to register is overwritten with jump to exploit code

- available in error handling routines

- most common approach used in modern Internet worms


What is a heap overflow? - ANSWER ✔✔- overflow of area of

memory used for variable storage (ie. contains UIDs, passwords, etc)

- variables can be changed to provide different level of access to steal

information

- not used as often in attacks




COPYRIGHT©NINJANERD 2025/2026. YEAR PUBLISHED 2026. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
3

, What is an example of a heap overflow attack? - ANSWER

✔✔Microsoft JPEG GDI+ vulnerability


How can overflow attacks be prevented? - ANSWER ✔✔- always

bound check input when coding

- use automatic code checking and safe libraries

- utilize hardware protection (bit in memory address to denote

executability)


What are some overflow attack prevention tools - ANSWER

✔✔Windows


- Microsoft Data Execution Prevention

- BufferShield

- Stack Defender

UNIX

- W^X

- PaX

What are some network vulnerability exploitation methods? -

ANSWER ✔✔- packet sniffing


- ARP spoofing

Document information

Uploaded on
July 31, 2026
Number of pages
32
Written in
2025/2026
Type
Exam (elaborations)
Contains
Questions & answers
$18.99

Wrong document? Swap it for free Within 14 days of purchase and before downloading, you can choose a different document. You can simply spend the amount again.
Written by students who passed
Immediately available after payment
Read online or as PDF

Seller avatar
Reputation scores are based on the amount of documents a seller has sold for a fee and the reviews they have received for those documents. There are three levels: Bronze, Silver and Gold. The better the reputation, the more your can rely on the quality of the sellers work.
NinjaNerd
3.4
(76)
Sold
396
Followers
6
Items
15309
Last sold
1 day ago


Why students choose Stuvia

Created by fellow students, verified by reviews

Quality you can trust: written by students who passed their tests and reviewed by others who've used these notes.

Didn't get what you expected? Choose another document

No worries! You can instantly pick a different document that better fits what you're looking for.

Pay as you like, start learning right away

No subscription, no commitments. Pay the way you're used to via credit card and download your PDF document instantly.

Student with book image

“Bought, downloaded, and aced it. It really can be that simple.”

Alisha Student

Working on your references?

Create accurate citations in APA, MLA and Harvard with our free citation generator.

Working on your references?

Frequently asked questions