C706 - Chapter 20 EXAM GUIDE GRADED A+ WITH COMPLETE SOLUTIONS

What is a denial-of-service attack? An attack that prevent the system from receiving, processing, or responding to legitimate traffic or requests for resources and objects What is spoofing attack? The attacker pretends to be someone or something other than whom they are. They can spoof identities, IP addresses, email addresses, and phone numbers. They often replace the valid source and /or destination IP address and node numbers with false ones. What are countermeasures to spoofing attacks? Countermeasures to spoofing attacks include patching the OS and software, enabling source/destination verification on routers, and employing an IDS to detect and block attacks. What is another term for master boot record? Boot sector What type of virus embeds itself in application documents? Macro Virus What can antivirus do when they encounter a virus infection? Delete the file, disinfect the file, or quarantine the file. What type of virus modifies itself each time it infects a new system in an attempt to avoid deterction Polymorphic Virus What type of malicious code launches itself when certain conditions (such as specific data) are met? Logic Bomb Where are password stored in Unix or linux systems? In the /etc/shadow file, much older system may still use /etc/passwd What term is used to describe hackers rooting through trash looking for useful information Dumpster diving What is cornerstone of computer security? Education What is the term used to describe a secret method used by a programmer to gain access to the system Trap door or back door What type of malicious code spreads through the sharing of infected media? Viruses What is malicious code? Malicious code is any script or program that performs an unwanted, unauthorized, or unknown activity on a computer system. Which form of antivirus response not only removes the virus from the system but also repairs any related damage? Cleaning When a person attempts to deceive an insider within an organization to divulge sensitive information or to perform sensitive actions on their behalf, what might this be called? Social Engineering What does malicious code often create on an infected system to allow the developers of the malicious code to remotely access the system at a later time? Back Door What are scanning attacks? Scanning attacks are reconnaissance attacks that usually precede another, more serious attack. What technology does the Java language use to minimize the threat posed by applets? -Encryption -Stealth -Sandbox -Confidentiality Sandbox The Java sandbox isolates applets and allows them to run within a protected environment, limiting the effect they may have on the rest of the system. You are the security administrator for an e-commerce company and are placing a new web server into production. What network zone should you use? -DMZ -Internet -Sandbox -Intranet DMZ The DMZ (demilitarized zone) is designed to house systems like web servers that must be accessible from both the internal and external networks.