PS hack

The following algorithm can be used by PGP for signing:

• RC5 (Rivest Cipher 5)

• RSA (Rivest–Shamir–Adleman)

• AES (Advanced Encryption Standard)

Which of the following vector attacks are specific for HTTP/2?

• CRIME (Compression Ratio Info-leak Made Easy) (attack)

• Dependency cycle (attack)

• Quick read (attack)

1. Consider the following example of an RRSIG record:

abcd.org 200 RRSIG A 13 20 200 (20210115123401 20190215123401 209 abcd.org. ) 

How large is the RRset that is signed by this RRSIG record?

• 100

• 20

• 13

Choose the attack that is not a DoS:

• Smurf Attack

• 1. Finger Bomb

• DNS Cache Poisoning

1. What type of XSS attack doesn’t require the attacker to directly interact with the target?

• Reflected

• Persistent

• 1. DOM-based

1. Which of the following vector attacks is specific for HTTP/2?

• Eclipse

• 1. Slow read

• 1. BREACH (Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext)

1. What is the effect of an XSS attack?

• 1. Allows an attacker to include remote code that is executed locally on the web-server

• 1. Malicious scripts are injected into trusted websites

• 1. Unauthorized commands are transmitted from a user that the web application trusts

1. Which of the following IDS software solutions works only as a HIDS?

• OSSEC

• Suricata

• Snort

1. What are the advantages of using a Network-based IDS?

• 1. More accurate than the Host-based solutions (in general)

• 1. Unobtrusive, compared with the Host-based solutions

• 1. Less overhead than the Host-based solutions

1. Choose the option that is not an attack vector for HTTP/2:

• 1. HPACK Bomb

• 1. Dependency Cycle attack

• 1. Fast read