3.2 Security Assessment Tools

Question 1

(Network Tool Types)

Port Scanners

Answer 1

tools designed to scan one or more systems to determine which TCP/UDP ports are open, closed, or filtered

Question 2

(Network Tool Types)

Vulnerability Scanners

Answer 2

programs designed to scan systems for weaknesses

Question 3

(Network Tool Types)

Protocol Analyzers

Answer 3

tools that can be used to capture and analyze traffic passing over a communications channel on a network

Question 4

(Network Tool Types)

SCAP Scanner

Answer 4

Security Content Automation Protocol employs existing open security standards in order to conduct vulnerability scans-while measuring and ranking the discovered vulnerabilities according to predetermined baselines

Question 5

(Network Tool Types)

Network Enumerator

Answer 5

scans systems and gives us more details such as usernames, groups, shares, and audit options

Question 6

(Network Tool Types)

Fuzzer

Answer 6

testing tools used to find implementation bugs in software by submitting malformed or semi-malformed data to an application in an automated fashion

Question 7

(Network Tool Types)

HTTP Interceptor

Answer 7

capture web traffic between the source web browser and the destination website

Question 8

(Network Tool Types)

Exploitation Tools/Frameworks

Answer 8

can exploit discovered vulnerabilities

Question 9

(Network Tool Types)

Visualization Tools

Answer 9

specialize in converting raw data into useful visual aids

Question 10

(Network Tool Types)

Log reduction tools

Answer 10

filters out junk data while ensuring important data is brought into focus and analyzed

Question 11

(Network Tool Types)

Log analysis tools

Answer 11

can help aggregate data, correlate it, and perform detailed reporting

Question 12

(Host Tool Types)

Password Crackers

Answer 12

specialized tools designed to essentially guess passwords

Question 13

(Host Tool Types)

vulnerability scanner

Answer 13

designed to run on a specific host and look for vulnerabilities and misconfigurations on the host

Question 14

(Host Tool Types)

Command Line Tools

Answer 14

can be used to perform routine network troubleshooting in addition to security assessments

Question 15

(Host Tool Types)

Antivirus

Answer 15

must be assessed for signs of tampering by malware aiming to disable the alerting/notificaiton/real-time protection features of antivirus tools

Question 16

(Host Tool Types)

Reverse Engineering Tools

Answer 16

process of disassembling a finished product or process into its building blocks in order to understand how the outcome was achieved from stat to finish

Question 17

(Physical Security Tools)

Lock Picks

Answer 17

can be used both to pick a lock and test a locks resistance to lock picking

Question 18

(Physical Security Tools)

RFID tools

Answer 18

uses electromagnetic fields to track virtually anything, including technological assets, employees, patients, children, animals, smart appliances, and car fobs

Question 19

(Physical Security Tools)

IR Camera

Answer 19

use infrared energy in to form an image so that the camera can “see” in the dark