CS6262 FINAL EXAM QUESTIONS AND
ANSWERS 2026 VERIFIED.
Random Scanning - ANS Each comprised computer probes random addresses
Permutation Scanning - ANS All comprised computers share a common psuedo-random
permutation of the IP address space
Signpost Scanning - ANS Uses the communication patterns of the comprised computer to find
a new target
Hit List Scanning - ANS A portion of a list of targets is supplied to a comprised computer
Subnet Spoofing - ANS Generate random addresses within a given address space
Random Sppofing - ANS Generate 32-bit numbers and stamp packets with them
Fixed Spoofing - ANS The spoofed address is the address of the target
Server Application - ANS The attack is targeted to a specific application on a server
Network Access - ANS The attack is used to overload or crash the communication mechanism
of a network
@COPYRIGHT ALL RIGHTS RESERVED PAGE 1 OF 14
, Infrastructure - ANS The motivation of this attack is a crucial service of a global internet
operation, for example core router
DoS Bug (Amplification Attack) - ANS Design flaw allowing one machine to disrupt a service
DoS Flood (Amplification Attack) - ANS Command botnets to generate flood of requests
UDP-based NTP - ANS -Particularly vulnerable to amplification attacks
-Small command can generate a large response
-Vulnerable to source IP spoofing
-Difficult to ensure computers only communicate with legitimate NTP servers
IP Header Format - ANS -Connectionless
-Unreliable
-No authentication
SYN Flood - ANS A type of DoS where an attacker sends a large amount of SYN request
packets to a server in an attempt to deny service.
SYN Flood Mitigations - ANS Syn Cookies - remove state from server, but incur performance
overhead
Crowdturfers - ANS - Crowdsource to create, verify, and manage fake accounts
- Solve CAPTCHAs
Penetration Testing - ANS Footprinting, Scanning, Enumeration, Gaining Access, Escalating
Privileged, Pilfering (steal data), Covering Tracks, Creating Backdoors
NS Record - ANS Points to other server
@COPYRIGHT ALL RIGHTS RESERVED PAGE 2 OF 14
ANSWERS 2026 VERIFIED.
Random Scanning - ANS Each comprised computer probes random addresses
Permutation Scanning - ANS All comprised computers share a common psuedo-random
permutation of the IP address space
Signpost Scanning - ANS Uses the communication patterns of the comprised computer to find
a new target
Hit List Scanning - ANS A portion of a list of targets is supplied to a comprised computer
Subnet Spoofing - ANS Generate random addresses within a given address space
Random Sppofing - ANS Generate 32-bit numbers and stamp packets with them
Fixed Spoofing - ANS The spoofed address is the address of the target
Server Application - ANS The attack is targeted to a specific application on a server
Network Access - ANS The attack is used to overload or crash the communication mechanism
of a network
@COPYRIGHT ALL RIGHTS RESERVED PAGE 1 OF 14
, Infrastructure - ANS The motivation of this attack is a crucial service of a global internet
operation, for example core router
DoS Bug (Amplification Attack) - ANS Design flaw allowing one machine to disrupt a service
DoS Flood (Amplification Attack) - ANS Command botnets to generate flood of requests
UDP-based NTP - ANS -Particularly vulnerable to amplification attacks
-Small command can generate a large response
-Vulnerable to source IP spoofing
-Difficult to ensure computers only communicate with legitimate NTP servers
IP Header Format - ANS -Connectionless
-Unreliable
-No authentication
SYN Flood - ANS A type of DoS where an attacker sends a large amount of SYN request
packets to a server in an attempt to deny service.
SYN Flood Mitigations - ANS Syn Cookies - remove state from server, but incur performance
overhead
Crowdturfers - ANS - Crowdsource to create, verify, and manage fake accounts
- Solve CAPTCHAs
Penetration Testing - ANS Footprinting, Scanning, Enumeration, Gaining Access, Escalating
Privileged, Pilfering (steal data), Covering Tracks, Creating Backdoors
NS Record - ANS Points to other server
@COPYRIGHT ALL RIGHTS RESERVED PAGE 2 OF 14
