Network+ Extra 3

Question 1

An SNMP ___ message retrieves information from a managed device.

Answer 1

Get

Question 2

An SNMP ___ message ____ a variable in a managed device or triggers an action on a managed device.

Answer 2

Set

Question 3

The noAuthNoPriv (no authorization, no privacy) security level uses community strings for authorization and does not use encryption to provide privacy.

Answer 3

noAuthNoPriv

Question 4

The authNoPriv (authorization, no privacy) security level provides authorization using hashed message authentication code (HMAC) with Message Digest 5 (MD5) or Secure Hash Algorithm (SHA). However, no encryption is used.

Answer 4

authNoPriv

Question 5

The authPriv (authorization, privacy) security level offers HMAC MD5 or SHA authentication and provides privacy through encryption. Specifically, the encryption uses the Cipher Block Chaining (CBC) Data Encryption Standard (DES) (DES-56) algorithm.

Answer 5

authPriv

Question 6

Many management systems provide a secured web connection using SSL/TLS security via a web browser.

Answer 6

HTTPS/management URL :

Question 7

An example of using an overt channel is tunneling one protocol inside another (for example, sending instant-messaging traffic via HTTP). Steganography is another example of sending information over an overt channel. An example of steganography is sending a digital image made up of millions of pixels with “secret” information encoded in specific pixels, where only the sender and the receiver know which pixels represent the encoded information.

Answer 7

Sending info over overt channels :

Question 8

different devices have trust with others if attackers can for example could compromise the host which is linked to the firewall then the attacker could bypass the firewall.

Answer 8

Trust Relationship Exploitation

Question 9

An attacker could hijack a TCP session, for example, by completing the third step in the three-way TCP handshake process between an authorized client and a protected server. If an attacker successfully hijacked a session of an authorized device, he might be able to maliciously manipulate data on the protected server.

Answer 9

Hijacking a session

Question 10

With this attack, a third-party system is used to help carry out the attack; oftentimes this third party is not compromised, making this attack very difficult to track down.

Answer 10

(DoS) Reflective: