Firewalls and Network Security Study Guide Midterm

Zero-day exploits are new and previously unknown attacks for which no current specific defenses exist.

• True

• False

You are a network professional. You want to overcome the security shortcomings of the Domain Name System (DNS). Of the following, what is one of those shortcomings?

• A fully qualified domain name (FQDN) vulnerability

• Use of Microsoft Active Directory

• Use of an intrusion detection system (IDS)

• Use of a plaintext communication

A combination of intrusion detection and prevention, as well as logging and monitoring, provides the best defense against what kind of attack?

• Distributed denial of service (DDoS)

• Zero-day exploit

• SQL injection

• Malicious code

A major U.S. online retailer has discovered that thousands of purchases have been paid for by stolen credit card numbers. An initial analysis of the location of the buyers reveals IP addresses from within the U.S. Upon further investigation, it is found that the actual origin point of the fraudulent buyer is a series of IP addresses located in Asia. What technology is the fraudster using?

• IP address fraud

• Ingress filtering

• Proxy server

• Port address translation (PAT)

Integrity is the protection against unauthorized access, while providing authorized users access to resources without obstruction.

• True

• False

Which type of hacker is a criminal whose career objective is to compromise IT infrastructures?

• Professional

• Recreational

• Script kiddie

• Opportunistic

Peer pressure is a form of motivation for some hackers.

• False

• True

Several times this week, the IT infrastructure chief of a small company has suspected that wireless communications sessions have been intercepted. After investigating, he believes it is some form of insertion attack. He is considering encrypted communications and preconfigured network access as a defense. What type of insertion attack is suspected?

• Intrusion detection system (IDS) insertion

• Rogue device insertion

• Cross-site scripting (XSS)

• SQL Injection

A malicious person has installed ransomware on a company user's computer. The ransomware message states that the malicious software will be removed if the user pays a certain amount of money digitally. What is a typical form of payment?

• Credit card

• PayPal

• Debit card

• Cryptocurrency

A breach is any attempt to get past a network's defenses.

• True

• False