4.5 Security Architecture and Tool Sets

Question 1

what are the FIVE monitoring tools analyst need to know?

Answer 1

MRTG (multi router traffic grapher)
Nagios
SolarWinds
Cacti
Netflow Analyzer

Question 2

what is wireshark?

Answer 2

a protocol analyzer or packet sniffer

Question 3

what are the THREE IPS tools?

Answer 3

sourcefire
snort
bro

Question 4

what is unit testing?

Answer 4

the debugging performed by the programmer while coding instructions

Question 5

what are the THREE categories of exploit tools?

Answer 5

interception proxy
exploit framework
fuzzers

Question 6

what error condition arises because data is not checked before input to ensure that it has an appropriate length?

Answer 6

buffer overflow errors

Question 7

what is the purpose of content inspection?

Answer 7

to search for malicious code or behavior

Question 8

what are the TWO exploit framework tools analyst need to know?

Answer 8

Metasploit, Nexpose

Question 9

what are the six SIEM tools analyst need to know?

Answer 9

Arcsight, QRadar, Splunk, AlienVault, OSSIM, Kiwi Syslog

Question 10

what is microsoft baseline security analyzer?

Answer 10

a microsoft application that creates security reports

Question 11

what are TWO examples of input validation errors?

Answer 11

buffer overflow and boundary condition errors

Question 12

what is a proxy server?

Answer 12

a server that caches and filters content

Question 13

what are the seven categories of preventive tools?

Answer 13

IPS
Firewall
Anti-Virus
Anti-malware

Enhanced Mitigation Experience Toolkit (EMET)

Web proxy
Web application firewall

Question 14

which error occurs when the length of the input data is more than the length that processor buffers can handle?

Answer 14

a buffer overflow

Question 15

what is the most popular intrusion detection system (IDS)?

Answer 15

network-based IDS

Question 16

what are the three interception proxy tools analyst need to know?

Answer 16

Burp Suite
Zap
Vega

Question 17

what does the acronym IDS denote?

Answer 17

intrusion detection system

Question 18

what are the SEVEN command-line tools analyst need to know?

Answer 18

netstat
ping
tracert/traceroute
ipconfig/ifconfig
nslookup/dig
Sysinternals
OpenSSL

Question 19

what is the difference between a password checker and a password cracker?

Answer 19

there is no difference. they are the same tools

Question 20

what are the SIX vulnerability scanning tools analyst need to know?

Answer 20

Qualys
Nessus
OpenVAS
Nexpose
Nikto
Microsoft Baseline Security Analyzer

Question 21

what are the TWO password cracking tools analyst need to know?

Answer 21

john the ripper

cain and abel

Question 22

what are the five forensic suite tools analyst need to know?

Answer 22

EnCase
FTK (forensic toolkit)
Helix
Sysinternals
Cellebrite

Question 23

which type of control is an intrusion detection system (IDS)?

Answer 23

detective technical

Question 24

which type of vulnerability assessment is more likely to demonstrate the success or failure of a possible attack?

Answer 24

a double-blind test

Question 25

what is Nessus?

Answer 25

a network vulnerability scanner

Question 26

what are the THREE categories of analytical tools?

Answer 26

vulnerability scanning monitoring tools interception proxy

Question 27

what are the THREE web application firewalls (WAFs) analyst need to know?

Answer 27

ModSecurity NAXSI Imperva

Question 28

what is the imaging tool analysts need to know?

Answer 28

DD

Question 29

what are the two hashing tools analyst need to know?

Answer 29

MD5sum | SHAsum

Question 30

what is the network scanning tool analyst need to know?

Answer 30

NMAP

Question 31

what activity provides identification of security flaws and verification of levels of existing resistance?

Answer 31

penetration testing

Question 32

what are the THREE fuzzer tools analyst need to know?

Answer 32

Untidy Peach Fuzzer Microsoft SDL File/Regex Fuzzer

Question 33

what are the FOUR categories of forensics tools?

Answer 33

forensics suites hashing password cracking imaging

Question 34

what are the four packet capture tools analyst need to know?

Answer 34

wireshark tcpdump network general aircrack-ng

Question 35

which tool obtains a visual map of the topology of your network, including all devices on the network?

Answer 35

a network mapper, also referred to as a network enumerator

Question 36

what are the THREE firewall vendors analyst need to understand?

Answer 36

Cisco, Palo Alto, Check Point

Question 37

which tool should you use to retrieve the contents of a GET request: a protocol analyzer or port scanner?

Answer 37

protocol analyzer

Question 38

what are the SIX categories of collective tools?

Answer 38

``` SIEM Networking scanning Vulnerability scanning Packet capture Command-line utilities IDS ```