Article View: alt.discuss.hacking
Article #2Re: Network Security Questions
From: Bonk
Date: Tue, 07 Dec 1999 00:00
Date: Tue, 07 Dec 1999 00:00
193 lines
8168 bytes
8168 bytes
James--
I would advise you to do your take-home test for Comp. 101 yourself; you
could have done it easily in half the time it took to type it in.
James wrote:
>
> To all of you network security guru's
>
> Can anyone provide the answers below? I have a bet going with a colleague he
> was wrong on half of them, however, I would like to double check with the
> answers I have. Tell me if my answers are wrong as they are next to the
> question:
>
> 1) What information is stored in the ARP cache? A
> a) IPaddresses matched to MAC addresses
> b) Network Routes
> c) Network protocols
> d) Network Names
> e) Hardware configuration alignment to network standards
>
> 2) An Ethernet network uses what network access method? C
>
> a) CSMA/CA
> b) ALOHA
> c) CSMA/CD
> d) TCP/IP
> e) Random
>
> 3) Why is OSPF called a link-state routing protocol? B
>
> a) It links networks together
> b) It monitors the state of network links or paths
> c) It links static routes together
> d) It translates between host and network links
> e) It defines Wide Area Network routes
>
> 4) What type of attack is a SYN flood attack? A
>
> a) Denial of Service
> b) Software Destruction
> c) Hardware Destruction
> d) Information Gathering
> e) False data placement
>
> 5) What is the first step in the address resolution process? A
>
> a) ARP looks for the name of the user in the cache
> b) ARP contacts a router for a route
> c) ARP checks for media type.
> d) ARP checks for the address on the Internet
> e) ARP checks if the address is on the local network
>
>
> 6) If your client were concerned about intrusions where attacks looked as
> though they were coming from a trusted source, what kind of attack would they be
> expecting? B
> a) IP counterfeiting.
> b) IP spoofing.
> c) IP capture.
> d) IP mirroring.
> e) IP matching
>
> 7) Which defines encryption? E
>
> a) It is a service that provides multiple copies of information to servers
> participating in the Security Module.
> b) It is the process of replicating data to prevent unauthorized access
> during transmission.
> c) It is a service that provides multiple copies of information to servers
> participating in the Management Module.
> d) It is the process of encoding date for platform independent access.
> e) It is the process of encoding data to prevent unauthorized access during
> transmission.
>
> 8) Bob is attempting to connect to an ftp server named ftp.files.com which
> resides on a separate subnet within Bob's organization. Bob cannot ping the
> server using its IP address. He can successfully ping his default gateway and
> the addresses of other computers on the same subnet as the ftp server. What is
> most likely the cause of the problem? E
> a) Bob's computer is set up with an incorrect default gateway
> b) Bob's computer has an incorrect subnet mask
> c) The IP configuration on the ftp server is incorrect
> d) The hosts file on Bob's computer has no entry for ftp.files.com
> e) There is no DNS configuration for ftp.files.com
>
> 9) The act of a packet, sent by a malicious or errant source, lying about
> the host from which it came is called ________. E
>
> a) replacement.
> b) substitution.
> c) Piggy-backing.
> d) counterfeiting.
> e) spoofing.
>
>
> 10) Ralph wants to configure a Windows NT Server machine as a multihomed
> gateway/router. Which of the following must Ralph do? B
>
> a) Assign each IP address a different address class
> b) Configure each network adapter with a unique subnet mask
> c) Enable IP forwarding
> d) Define TCP conventions
> e) Configure each network adapter with the same subnet mask
>
> 11) Pete is unable to access a server on a remote subnet. After monitoring
> the network with a network analysis tool, Pete discovers that his computer is
> broadcasting an ARP request for the MAC address associated with the IP of the
> remote server. No other users are having difficulty accessing the server. What
> is most likely the problem?
> a) Pete's computer has incorrect DNS configuration. C
> b) Pete's computer has an incorrect subnet mask.
> c) Pete's computer has an incorrect default gateway.
> d) The server has an incorrect default gateway.
> e) The router has an incorrect subnet mask.
>
> 12) You have the network ID 209.168.19.0. You occupy four offices of a
> building. You create a subnet for each office. You want to allow for the
> largest possible number of host IDs on each subnet. Which subnet mask do you
> choose? A
> a) 255.255.255.209
> b) 255.255.255.192
> c) 255.255.255.252
> d) 255.255.255.240
> e) 255.255.255.248
>
> 13) You are at a host machine that is connected to a TCP/IP network. You
> ping 127.0.0.1 and fail to get a response. What is the most probable cause of
> the problem?
> a) TCP/IP is not properly installed on the workstation. A
> b) The default gateway address on the workstation is incorrect.
> c) The subnet mask on the workstation is incorrect.
> d) The host machine is not set up for DHCP.
> e) There is no DNS server defined.
>
> 14) What command do you use to see the routing tables of a Windows NT Server
> computer? D
> a) arp
> b) nbtstat
> c) route
> d) netstat
> e) show
>
> 15) Which of the following is NOT a way to prevent routing loops? E
>
> a) Define a maximum hop count
> b) Split horizon
> c) Triggered updates
> d) Poison Reverse
> e) Count to infinity
>
> 16) What is the sequence of packet exchange before a TCP session is
> established? C
> a) SYN,SYN/ACK,ACK
> b) SYN,SYN/ACK,FIN
> c) SYN/ACK,ACK,FIN
> d) SYN,FIN,RST
> e) RST,SYN,SYN/ACK,ACK
>
> 17) What packet is used to abruptly close a TCP connection? D
> a) ACK
> b) HLT
> c) STP
> d) RST
> e) FIN
>
> 18) What is the standard port number for FTP data connections? B
> a) 20
> b) 21
> c) 23
> d) 25
> e) 80
>
> 19) Which of the following will append /etc/fw/bin to the currunt path in
> the UNIX Bourne Shell: D
> a) set path=$PATH;/etc/fw/bin;export PATH
> b) set path=$PATH:/etc/fw/bin;export PATH
> c) set path $PATH;/etc/fw/bin:export PATH
> d) set path $PATH:/etc/fw/bin:export PATH
> e) set path=PATH;/etc/fw/bin:export PATH
>
> 20) Which command is used to list processes currently running on the system?
> C
> a) ls
> b) pr
> c) ps
> d) po
> e) ds
--
Bonk
Everything counts in large amounts.
Technical Details
Message-ID:
<384CAE2C.43FB@devney.net>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<384bdf8b.26966911@news4.usenetserver.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fd9dc,7629e86b38ea130e X-Google-Attributes: gidfd9dc,public X-Google-Thread: 111514,7629e86b38ea130e X-Google-Attributes: gid111514,public X-Google-Thread: 10a9ab,7629e86b38ea130e X-Google-Attributes: gid10a9ab,public X-Google-Thread: 1038e8,7629e86b38ea130e X-Google-Attributes: gid1038e8,public X-Google-Thread: f977f,7629e86b38ea130e X-Google-Attributes: gidf977f,public X-Google-Thread: 11550a,7629e86b38ea130e X-Google-Attributes: gid11550a,public From: Bonk <bonk@devney.net> Subject: Re: Network Security Questions Date: 1999/12/07 Message-ID: <384CAE2C.43FB@devney.net> X-Deja-AN: 557598227 Content-Transfer-Encoding: 7bit References: <384bdf8b.26966911@news4.usenetserver.com> Content-Type: text/plain; charset=us-ascii MIME-Version: 1.0 NNTP-Posting-Date: Mon, 06 Dec 1999 22:50:20 PST Newsgroups: alt.discuss.hacking,alt.tech-support,cn.bbs.comp.security,comp.networks,comp.os.ms-windows.nt.admin.security,comp.security