Advanced pc security final exam results
1 like1,751 views
The document summarizes the results of a final exam on advanced PC security. The exam evaluated the test taker's knowledge on topics related to hacking, social engineering, wireless security, search tools, anonymity, and computer forensics. The test taker answered 37 out of 39 questions correctly, achieving a score of 97%. The summary congratulates the test taker on their good work.
Advanced pc security final exam results
- 1. am Resources Lessons Quizzes Assignments Discussion Completion Log Out Advanced PC Security completion: final exam results d Final Exam Evaluation of your answers: 1. What term do you use to describe the hacking method where one participant is ethical and the other is unethical? You chose: Gray hat. Correct! Gray hat hacking is the term used when the person on the inside is ethical and the person on the outside is unethical. While both work together, the methods and the results are very questionable. 2. What do you call the three types of intrusions? You chose: Physical, remote, and system. Correct! These are the types of intrusions based on how hackers gain access to the network. 3. Under the U.S. Computer Fraud and Abuse Act, what is the penalty for illegal hacking? You chose: Fines, imprisonment, or both. Correct! Violation of the U.S. Computer Fraud and Abuse Act will result in fines, imprisonment, or both, depending upon the violation.
- 2. 4. Which term describes an attack using emotions, trust, kindness, and friendship? You chose: A psychological social engineering attack. Correct! A psychological social engineering attack uses psychology to access the needed hacking information. 5. As an auditor, what is your primary concern about using social engineering methods in your audit? You chose: Ethics. Correct! The ethical consideration is not only what management may do with the information, but how your colleagues will feel about what you did. 6. What are the two simplest ways to secure a wireless network? You chose: Change the default username and password and disable the broadcast of your SSID. Correct! When you really want to secure your network, you need to follow these two steps carefully. 7. What are the names of the processes Google uses to index the Web and produce results? You chose: Gather, index, and query. Correct! The googlebot gathers the pages and links, feeds the document to the indexer for processing, and then uses the query to produce the results from several high-speed multi-processor computers. 8. What is a packet sniffer? You chose: A program that captures packets of traffic in and out of your computer. Correct! A packet sniffer or packet capture program captures traffic (through
- 3. packets) in and out of your computer. (Lesson 3, Chapter 3) 9. How do you surf the Internet anonymously? You chose: Use a proxy server. Correct! When using a proxy server, the server downloads the pages and passes them to you, which guards your anonymity. 10. What kind of search is represented by the following: employee ANDpassword ORpasscode? You chose: A Boolean search. Correct! George Boole is the founding father of this popular search capability. 11. What can you use to find out if a network IP address is active? You chose: Network Query Tool. Correct! Through a series of network tests including a ping, tracert, and port check, the Network Query Tool will tell you if a network address is active and receiving traffic. 12. What types of searches can be done through registrars? You chose: IP, NIC, and Domain. Correct! You can search for owners of network domains by IP and domain (Web) addresses and nicknames. 13. What two layers operate within the Data Link Layer of the OSI model? You chose: Media Access Control (MAC) and Logical Link Control (LLC). Correct! In the Data Link Layer, MAC and LLC help with traffic control to
- 4. ensure smooth data flow. 14. In the binary numbering system, which digit is an electrical off switch? You chose: 0. Correct! In the binary numbering system, 0 is the electrical off and the digit one is an electrical on switch. 15. Which term defines a set of methods and guidelines for computing? You chose: Protocol. Correct! Protocol, in its simplest definition, is a set of methods and guidelines that let computers talk to each other. 16. What type of packet is used to establish a network connection? You chose: SYN and ACK. Correct! These are the processes performed by TCP protocol to establish a network connection between two network devices. 17. What part of the packet allows a hacker to gather information and gain control? You chose: The IP header. Correct! The IP header contains all the information a hacker needs to collect network information and gain control by manipulating flags, forging IP addresses, and changing offset numbers in fragments. 18. What is the definition of spoofing? You chose: Forging a packet's source or destination IP address.
- 5. Correct! Spoofing is a common way for hackers to gain access to your system. 19. Which of the following is an example of an exploit? You chose: A packet spoofing utility 20. Correct! They provide the ability to change the IP headers to anything the user wants. 21. What term defines unexpected behavior from a system or software using reasonable security policies? You chose: Universal vulnerability. Correct! A universal vulnerability is defined as unexpected behavior from a system or software using reasonable security policies. 22. What do you call a piece of programming code that does not handle excessive input of data? You chose: Unchecked buffer. Correct! An unchecked buffer is a piece of programming code that is used as a placeholder for programming values to be used in memory. 23. What is the name of the channels used to transfer data between input or output devices and the processor? You chose: Ports. Correct! Ports allow data to flow freely when they're open. 24. Which word defines a program that runs unattended in the background to perform continuous or periodic system-wide functions, such as network control?
- 6. You chose: Daemon. Correct! This allows networks to run efficiently without needing human intervention. 25. What term describes scanning a network for ports and known services? You chose: Service discovery. Correct! When you perform a service discovery, you scan your network ports for known services like FTP and HTTP. 26. What do you call the icons, buttons, and graphics you use to execute computer commands? You chose: GUI. Correct! The icons, buttons, and graphics that provide user-friendly short cuts to your programs are called GUI. 27. What do you call the daemon that maintains a database and allows clients to find servers? You chose: Endpoint Mapper 28. Correct : The RPC endpoint mapper is a daemon that maintains a database called the local endpoint map, which allows clients to find servers 29. What provides the inner networking protocol that ties the client-server program together under RPC using TCP/IP? You chose: Stack. Incorrect. A stack is a layer of memory or networking protocol that provides access to the sockets. The correct answer is: DCOM. (Lesson 9, Chapter 4)
- 7. 30. What is the main problem with public and private community strings? You chose: The authentication is weak. Correct! The authentication is weak because anyone can modify data, which means hackers can manipulate it at will. 31. Which type of rootkit is the most powerful? You chose: Kernel-mode. Correct! Kernel-mode rootkits are the most powerful since the native API can't intercept them and they directly manipulate the data structure. 32. What type of rootkit activates every time the system boots? You chose: Persistent. Correct! A persistent rootkit contains code that executes automatically when the system starts. 33. What are the duties of the security team? You chose: Policy development, practice, and response. Correct! The security team is the first responder whan a breach or other security incident occurs. 34. Which word defines data viewed by unauthorized personnel, data corruption, or data loss? You chose: Compromised. Correct! Compromised data that has questionable integrity. 35. Which best practice would prevent users from playing music CDs on their
- 8. systems by imposing a penalty for doing so? You chose: A written reasonable use policy. Correct! This policy must detail forbidden actions and consequences to have full force. 36. Which term means the collection and analysis of data in a manner that is admissible in court? You chose: Computer forensics. Correct! CERT defines computer forensics as the collection and analysis of data from computer systems, networks, wireless, and storage media in a manner that is admissible in court. 37. What are records of regularly conducted activity called in court? You chose: Exception 38. Correct: Basically, they are records of regularly conducted activity. 39. Which of the following determines the admissibility of data in court? You chose: FRE. Correct! FRE determines the admissibility of computer data in court, and is a basic foundation for laws on computer crimes. Your score: 97 % (out of 100%). Good work. Final Exam Date submitted: 12/28/2011 05:16:28 AM (PST) Please print this evaluation for your records. resources | lessons | quizzes | assignments | discussion | completion Copyright © 1997 - 2011 Education To Go. All rights reserved. The material on this site
- 9. cannot be reproduced or redistributed unless you have obtained prior written permission from Education To Go. Education To Go and ed2go are registered trademarks of Education To Go, a part of Cengage Learning. hck-0