Escrito por estudiantes que aprobaron Inmediatamente disponible después del pago Leer en línea o como PDF ¿Documento equivocado? Cámbialo gratis 4,6 TrustPilot
logo-home
Document preview thumbnail
Vista previa 4 fuera de 32 páginas
Examen

CNIT 455 Exam 3 | 230+ Exam Questions & Verified Answers | Software Vulnerabilities, Buffer Overflow, IDS, NAC & Cryptography | Purdue University

Document preview thumbnail
Vista previa 4 fuera de 32 páginas

Prepare confidently for CNIT 455 Exam 3 with this comprehensive collection of 230+ exam questions and verified answers covering the core concepts of network security, secure software development, intrusion detection, network access control, cryptography, and vulnerability exploitation taught in Purdue University's Computer and Information Technology (CNIT 455) course. This exam study guide provides structured question-and-answer coverage of software vulnerabilities, reverse engineering, remote code execution (RCE) tools, buffer and heap overflow attacks, exploit techniques, denial-of-service (DoS/DDoS) attacks, reconnaissance, routing attacks, VLAN security, intrusion detection systems (IDS), Network Access Control (NAC), encryption algorithms, hashing, and message authentication codes, making it an ideal resource for exam preparation and technical review. The material is organized in a logical progression from software exploitation and network attacks through defensive technologies and modern cryptographic techniques. Students will review secure coding principles, vulnerability discovery methods, packet sniffing, ARP spoofing, SYN floods, routing protocol attacks (RIP, OSPF, EIGRP, and BGP), passive and active reconnaissance, rootkits, host-based and network-based IDS architectures, NAC deployment models, symmetric and asymmetric encryption, AES, DES, 3DES, block cipher modes, hash functions including MD5 and SHA families, and message authentication codes (MACs). The question-and-answer format reinforces technical terminology while helping students master concepts commonly assessed in cybersecurity and network defense examinations. The topics covered are consistent with widely recognized cybersecurity literature and industry references, including: William Stallings, Cryptography and Network Security: Principles and Practice (Pearson). Bruce Schneier, Applied Cryptography: Protocols, Algorithms, and Source Code in C (Wiley). Charlie Kaufman, Radia Perlman & Mike Speciner, Network Security: Private Communication in a Public World (Prentice Hall). NIST, FIPS 197: Advanced Encryption Standard (AES). NIST, Secure Hash Standard (FIPS 180-4). Microsoft Learn Documentation (Windows Security, Defender, IDS/NAC, and Cryptography). Relevant Students: Purdue University CNIT 455 students, Cybersecurity students, Computer and Information Technology students, Information Security students, Network Security students, Computer Science students, Digital Forensics students, Ethical Hacking students, Penetration Testing students, Information Assurance students, Systems Security students, students preparing for CNIT 455 Exam 3. Keywords: CNIT 455, Exam 3, software vulnerabilities, secure coding, reverse engineering, RCE, buffer overflow, heap overflow, overflow attacks, NOP sled, jump to register, exploit mitigation, Data Execution Prevention, packet sniffing, ARP spoofing, SYN flood, denial of service, DDoS, reconnaissance, network reconnaissance, operating system fingerprinting, TCP stack fingerprinting, rootkits, IDS, host-based IDS, network-based IDS, intrusion detection, intrusion prevention, NAC, network access control, 802.1X, DHCP attacks, VLAN attacks, VTP manipulation, routing attacks, RIP, OSPF, EIGRP, BGP, cryptography, symmetric encryption, asymmetric encryption, AES, DES, 3DES, block cipher modes, ECB, CBC, CTR, OFB, hash functions, MD5, SHA-1, SHA-256, SHA-512, message authentication code, HMAC, CBC-MAC, UMAC, cybersecurity, network security

Vista previa del contenido

CNIT 455 Exam 3 2026 Exam
Questions and Correct
Answers | New Update



Software vulnerabilities are typically a result of what? - ANSWER

✔✔- non-secure coding


- "make it work first and secure it later" approach

How can vulnerabilities be discovered in open source code? -

ANSWER ✔✔- can be analyzed natively


How can vulnerabilities be discovered in closed source code? -

ANSWER ✔✔- must be reverse engineered


What are RCE tools? - ANSWER ✔✔- used by disassemblers to

convert binary to assembly language for analysis

,- means of understanding memory usage and basic logic flow of

application

- hex editors can be used to change constants/operations once memory

offset is found


What is an overflow attack? - ANSWER ✔✔- most common means of

running malware on a target

- occurs when application doesn't check length of input being placed into

variable or buffer

- always creates a problem


What is a buffer overflow? - ANSWER ✔✔- most commonly used

attack vector

- too much is put into a variable and the memory is overwritten

immediately following

- critical to keep Internet applications "boxed in" as a result

What is the process for exploiting an application buffer overflow? -

ANSWER ✔✔- redirect processor to memory be overflowed by

attacking stack (ie. arguments, return address, previous frame pointer,

local variables, buffer)

- overflow buffer to replace return address with address of planted code

,What are some examples of buffer overflow attacks? - ANSWER ✔✔-

NOP sled

- jump to register


What is a NOP sled? - ANSWER ✔✔- oldest and most widely used

technique

- series of hoops with jump at end of shellcode is written

- increases likelihood of hitting exploit code in stack

- modern IDS systems look for this type of attack


What is a jump to register buffer overflow attack? - ANSWER ✔✔-

jump to register is overwritten with jump to exploit code

- available in error handling routines

- most common approach used in modern Internet worms


What is a heap overflow? - ANSWER ✔✔- overflow of area of

memory used for variable storage (ie. contains UIDs, passwords, etc)

- variables can be changed to provide different level of access to steal

information

- not used as often in attacks




COPYRIGHT©NINJANERD 2025/2026. YEAR PUBLISHED 2026. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
3

, What is an example of a heap overflow attack? - ANSWER

✔✔Microsoft JPEG GDI+ vulnerability


How can overflow attacks be prevented? - ANSWER ✔✔- always

bound check input when coding

- use automatic code checking and safe libraries

- utilize hardware protection (bit in memory address to denote

executability)


What are some overflow attack prevention tools - ANSWER

✔✔Windows


- Microsoft Data Execution Prevention

- BufferShield

- Stack Defender

UNIX

- W^X

- PaX

What are some network vulnerability exploitation methods? -

ANSWER ✔✔- packet sniffing


- ARP spoofing

Información del documento

Subido en
31 de julio de 2026
Número de páginas
32
Escrito en
2025/2026
Tipo
Examen
Contiene
Preguntas y respuestas
$18.99

¿Documento equivocado? Cámbialo gratis Dentro de los 14 días posteriores a la compra y antes de descargarlo, puedes elegir otro documento. Puedes gastar el importe de nuevo.
Escrito por estudiantes que aprobaron
Inmediatamente disponible después del pago
Leer en línea o como PDF

Seller avatar
Los indicadores de reputación están sujetos a la cantidad de artículos vendidos por una tarifa y las reseñas que ha recibido por esos documentos. Hay tres niveles: Bronce, Plata y Oro. Cuanto mayor reputación, más podrás confiar en la calidad del trabajo del vendedor.
NinjaNerd
3.4
(76)
Vendido
396
Seguidores
6
Artículos
15309
Última venta
1 día hace


Por qué los estudiantes eligen Stuvia

Creado por compañeros estudiantes, verificado por reseñas

Calidad en la que puedes confiar: escrito por estudiantes que aprobaron y evaluado por otros que han usado estos resúmenes.

¿No estás satisfecho? Elige otro documento

¡No te preocupes! Puedes elegir directamente otro documento que se ajuste mejor a lo que buscas.

Paga como quieras, empieza a estudiar al instante

Sin suscripción, sin compromisos. Paga como estés acostumbrado con tarjeta de crédito y descarga tu documento PDF inmediatamente.

Student with book image

“Comprado, descargado y aprobado. Así de fácil puede ser.”

Alisha Student

Preguntas frecuentes