Intro to IS

Question 1

Kismeth

Answer 1

Network detector that is wireless (intrusion Detection System)

Question 2

Wire Shark

Answer 2

A sniffer that intercepts Traffic Wireless / Wired

Question 3

Fuzzer

Answer 3

Bombards application with data and inputs from a wide variety of sources to make it fail or behave unexpectedly

Question 4

Block Cypher

Answer 4

Cipher that takes a predetermined number of bits in the plaintext message and encrypts that block

Question 5

Secure Sockets Layer Protocol (SSL)

Answer 5

Uses the RSA algorithm, an asymmetric algorithm, to secure web and email traffic

Question 6

Heuristics

Answer 6

Process of Anomaly detection used by anti-malware tools to detect malware without signatures

Question 7

Nessus

Answer 7

Tool is a well known-vulnerability assessment tool that also includes a port scanner

Question 8

Attack Surface

Answer 8

Total areas the operating system might be attacked

Question 8

Network Intrusion Detection system

Answer 8

System that monitors the network which it is connected for unauthorized activity

Question 9

Packet Sniffer

Answer 9

Known network or protocol analyzer, intecepts traffic on a network

Question 10

NMAP

Answer 10

Tool used to port scan a host on a network and identify the operating systems those hosts are running

Question 11

Buffer Overflows

Answer 11

Vulnerability is stopped by proper bounds checking / not properly account the amount of data input into the application

Question 12

Hping3

Answer 12

Tool used to test the security of firewalls

Question 13

Proxy Server

Answer 13

Specialized type of firewall that can serve as a coke point, log traffic for later inspection

Question 14

Deep Packet

Answer 14

Firewall technology that analyzes the actual content of the traffic that is flowing through

Question 15

Static

Answer 15

Analyzes the location the content is coming from

Question 16

Packet Filtering

Answer 16

Firewall technology that inspects the contents of each packet in the network traffic individually based on desination IP address

Question 16

Scanner

Answer 16

Detects various security flaws when examining hosts

Question 16

Nikto/Wikto

Answer 16

Web server analysis tool that performs checks for many common server sides vulnerabilities

Question 17

Intrusion Prevention Systems

Answer 17

Refuse traffic from the source of the attack

Question 18

Intrusion Detection Systems

Answer 18

Monitor and alert that notifies you when an attack or other undesirable activity takes place

Question 18

Scoping phase

Answer 18

occurs when a team comes to an agreement on what will be tested during the pen testing process.