Recon and Denial
As a victim of a Smurf attack, what protection measure is the most effective during the attack?
What is the Communication with our upstream provider?
You want to identify all devices on a network along with a list of ports on those devices. What tool should you use?
What is the Network Mapper?
What are typically associated with human resource security policies?
What is the background checks, termination?
What recreation of historical events is made possible through?
What is the audit trails?
What is a firewall function?
What is the packet filtering?
Which type of active scan turns off all flags in a TCP header?
What is the Null?
You want to check a server for user account that have weak password. What tool should you use?
What is the John the Ripper?
What is the primary purpose of forcing employees to take mandatory one-week minimum vacations every year?
What is the check for evidence of fraud?
What will the netstat -a command show?
What is the all listening and non-listening sockets?
What is the best device to deploy to protect your private network from a public untrusted network?
What is the firewall?
What is modified in the most common form of spoofing on a typical IP packet?
What is the Source address?
What identifies standards and XML formats for reporting and analyzing system vulnerabilities?
What is the OVAL?
What is not part of security awareness training?
What is the employee agreement documents?
What is the purpose of audit trails?
What is the Detect security-violation events?
What does a router acting as a firewall use to control which packets are forwarded or dropped?
What is the ACL?
An attacker sets up 100 drone computers that flood a DNS server with invalid requests. This is an example of which kind of attack?
What is the DDoS?
You want to use a vulnerability scanner to check a system for known security risks. What should you do first?
What is the up date the scanner definition files?
What is not an element of the termination process?
What is the dissolution of the NDA?
What command should you use to scan for open TCP ports on your Linux system?
What is the nmap -sT
What networking devices or services prevents the use of IPsec in most cases?
What is the NAT?
A SYN attack or a SYN flood exp;pits or alters which element of the TCP three-way handshake?
What is the ACK?
You have run a vulnerability scanning tool and identified several patches that need to be applied to a system. What should you do next after the applying the patches?
What is the Run the vulnerability assessment again?
When you inform an employee that they are being terminated what is the most important activity?
What is the disabled or network access?
What identifies the process of reviewing log files for suspicious activity and threshold compliance?
What is the auditing?
You have been given a laptop to use for work. You connect the laptop to your company network, use it from home, and use it while traveling. You want to protect that laptop from Interent-bases attacks. What solution should you use?
What is the Hist based firewall?