Chapter 6 Networking Protocols and Threats Review

Question 1

A person attempts to access a server during a zone transfer to get access to a zone file. What type of server are they trying to manipulate?

A. Proxy server
B. DNS server
C. File server
D. Web server

Answer 1

B. DNS server

DNS servers are the only types of servers listed that do zone transfers. The purpose of accessing the zone file is to find out what hosts are on the network.

Question 2

What TCP port does LDAP use?

A. 389
B. 80
C. 443
D. 143

Answer 2

A. 389

The Lightweight Directory Access Protocol (LDAP) uses port TCP 389.
Port 80 is HTTP
Port 443 is HTTPS
Port 143 is used by IMAP

Question 3

From the list of ports select two that are used for email? (Select the two best)

A. 110
B. 3389
C. 143
D. 389

Answer 3

A. 110
C. 143

POP3 uses port 110 and IMAP uses 143
3389 is used for Remote Desktop Protocol (RDP)
389 is used for LDAP

Question 4

What port number does the Domain Name System use?

A. 53
B. 80
C. 110
D. 88

Answer 4

A. 53

DNS is 53
HTTP is 80
POP3 is 110
Keberos is 88

Question 5

If a person takes control of a session between a server and a client, it is known as what type of attack?

A. DDoS
B. Smurf
C. Session hijacking
D. Malicious software

Answer 5

C. Session hijacking

Session Hijacking or (TCP/IP Hijacking) is when an unwanted mediator takes control of a session between a client and a server (for example, an FTP or HTTP Session).

Question 6

Making data appear as if it os coming from somewhere other than its original source is known as what?

A. Hacking
B. Phishing
C. Cracking
D. Spoofing

Answer 6

D. Spoofing

Spoofing is when a malicious user makes data or email appear to be coming from somewhere else.

Question 7

A coworker goes to a website but notices that the browser brings her to a different website and that the URL has changed. What type of attack is this?

A. DNS poisoning
B. Denial of Service
C. Buffer Overflow
D. ARP Poisoning

Answer 7

A. DNS poisoning

DNS poisoning can occur at a DNS server and affect all clients on the network. It can also occur at the individual computer. Another possibility is that spyware has compromised the browser.
DoS attack that attempts to stop a server from functioning.
A buffer overflow is an attack that, for example could be perpetuated on a web page
ARP Poisoning is the poisoning of an ARP table, creating confusion when it comes to IP address-to-MAC address resolutions.

Question 8

For a remote tech to log in to a user’s computer in another state, what inbound port must be open on the user’s computer?

A. 21
B. 389
C. 3389
D. 8080

Answer 8

C. 3389

Port 3389 must be open onto inbound side of the user’s computer to enable a remote tech

Question 9

When users in your company attempt to access a particular website, the attempts are redirected to a spoofed website. What are two possibilities?

A. DoS
B. DNS Poisoning
C. Modified hosts file
D. Domain name kiting

Answer 9

B. DNS Poisoning
C. Modified hosts file

Domain Kiting is when a person renews and cancels domains within five-day periods.

Question 10

Don must configure his firewall to support TACACS+. Which port(s) should he open on his firewall?

A. Port 53
B. Port 49
C. Port 161
D. Port 22

Answer 10

B. Port 49

Port 53 is DNS
Port 161 is SNMP
Port 22 SSH

Question 11

Which of the following ports is used by Kerberos by default?

A. 21
B. 80
C. 88
D. 443

Answer 11

C. 88

88=Keberos
21= FTP
80=HTTP
443=HTTPS

Question 12

Which of the following is the best option of you are trying to monitor network devices?

A. SNMP
B. Telnet
C. FTPS
D. IPsec

Answer 12

A. SNMP

Simple Network Management Protocol is the best protocol to use to monitor network devices.
Telnet is a deprecated protocol that is used to remotely administer network devices.
IPsec is used to secure VPN connections and other IP connections.

Question 13

Which port number is used by SCP?

A. 22
B. 23
C. 25
D. 443

Answer 13

A. 22

23=Telnet
25=SMTP
443=HTTPS

Question 14

Which of the following is the most secure protocol for transferring files?

A. FTP
B. SSH
C. FTPS
D. Telnet

Answer 14

C. FTPS

Question 15

Which of the following protocols allow for the secure transfer of files? (Select the two best answers)

A.  SNMP
B.  SFTP
C.  TFTP
D.  SCP
E.  ICMP

Answer 15

B. SFTP
D. SCP

The Secure FTP (SFTP) and Secure Copy (SCP) Protocol provide for the secure transfer of files.
ICMP is the protocol initiated by ping to invoke responses from other computers
Trivial FTP is not secure by default.