4.1 Organizational Security

Question 1

ICMP echo request

Answer 1

a message used to test network connectivity. It’s also known as a ping message.

Question 2

dig

Answer 2

linux version of nslookup

Question 3

arp

Answer 3

address resolution protocol
determine a mac address based on an ip address

Question 4

curl

Answer 4

client url
retrieves data using URL

Question 5

IP scanners

Answer 5

locate active devices

Question 6

hping

Answer 6

a free, open-source tool that generates and analyzes TCP/IP packets
a ping that can send almost anything

Question 7

theHarvester

Answer 7

kali linux
gather information from public sources

Question 8

sn1per

Answer 8

popular vulnerability scanner that can be used during a penetration test
view of your internal and external attack surface

Question 9

scanless

Answer 9

Python script that performs port scans using online scanners
port scan proxy

Question 10

dnsenum

Answer 10

enumerate dns information
automatically identifies DNS records

Question 11

nessus

Answer 11

a vulnerability scanner that scans for security weaknesses in computers and networks.

Question 12

cuckoo

Answer 12

malware sandbox

Question 13

grep

Answer 13

find text in a file - linux

Question 14

chmod

Answer 14

change mode r w x

Question 15

logger

Answer 15

add entries into syslog

Question 16

SSH

Answer 16

Secure Shell TCP/22

Question 17

.ps1

Answer 17

windows powershell
system and domain administration

Question 18

.py

Answer 18

python
general purpose scripting language

Question 19

tcpdump

Answer 19

open-source packet analyzer that runs on Linux
captures packet from cmd

Question 20

dd

Answer 20

disk drive
create restore copy disk images

Question 21

memdump

Answer 21

copy of a device’s working memory (RAM)
The dump can be used to diagnose the cause of the crash

Question 22

winhex

Answer 22

hexadecimal editor that can modify the contents of files, disks, and RAM. It’s useful for:
- Computer forensics
- Data recovery
- Low-level data processing
- IT security

Question 23

FTK imager

Answer 23

open-source tool for creating forensic images and previewing data. It’s used by digital forensic investigators to acquire, examine, and validate digital evidence

Question 24

netcat

Answer 24

a command-line utility for reading and writing data over network connections

Question 25

wireshark

Answer 25

a free, open-source tool that captures and analyzes network traffic. It’s also known as a packet sniffer, network analyzer, or network protocol analyzer.