1. What is an example of a social engineering attack? Group of answer choices DDoS DoS Piggybacking On-path attack 2. Which type of technology attack involves having a user to install software that is being advertised as one thing, but is really a code set that compromises your computer in some way? Group of answer choices Malware TCP Dump Packet Analyzer Spectrum Analyzer 3. Which of the following best describes DNS Poisoning? Group of answer choices Changing the content of the local DNScache Redirecting users to a malicious website via intentional DNS database misconfiguration Applying for a domain name using a false identity. SQL server injections

1. What is an example of a social engineering attack? Group of answer choices DDoS DoS Piggybacking On-path attack 2. Which type of technology attack involves having a user to install software that is being advertised as one thing, but is really a code set that compromises your computer in some way? Group of answer choices Malware TCP Dump Packet Analyzer Spectrum Analyzer 3. Which of the following best describes DNS Poisoning? Group of answer choices Changing the content of the local DNScache Redirecting users to a malicious website via intentional DNS database misconfiguration Applying for a domain name using a false identity. SQL server injections

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter7: Risk Management: Treating Risk

Section: Chapter Questions

Problem 7E

See similar textbooks

Similar questions

9) XSS is a very famous attack in web services. How is it be captured by a snortrule? Write the rule and explain ----------------------- Thank'sAbdulrahim Taysir
A company accidentally sends a newsletter with a mistyped website address. The address points to a website that has been spoofed by hackers in order to collect information from people who make the same typo. What kind of attack is this? a. Phishing b. Baiting c. Quid pro quo d. Tailgating
Which of the following security attributes is required to verifying the identity of a user and evict imposters? a. Confidentiality b. Availability c. Integrity d. Authentication ___________ Which of the following sentences is incorrect with respect to Shodan? a. Shodan can be used to find open ports b. Shodan is a search engine for Internet connected devices c. Shodan can be used to find online computers d. Shodan can be used to perform an ARP attack -------------------- Which of the following is an example of a security threat to a web server? a. Remote access via Telnet b. Managed open ports c. Patched services d. Long passwords
What happens if a hacker tries to change the Tag (the MAC) and the ciphertext when the message authentication code is being used? Describe why this attack will always be unsuccessful since the recipient would be able to recognize a modified Tag or ciphertext.
Which of the following is NOT a purpose of a firewall?I've started developing a software to filter packets. If so, could you perhaps outline some rules for me to adhere to?
1) This type of attack sends out several e-mails to trick users into revealing personal information in hopes someone responds. a) Ransomeware b) Pharming c) Trojan horse d) Phishing
The most effective method of securing a network's perimeter is using a virtual private network (VPN). Can they also protect handheld gadgets? Large Quantity of Text So, what is an ACL, exactly? The definition of a firewall is. Explain the differences between the two in at least 250 words. Why do they work together?
q9- Cross Site Scripting is an example of which kind of OWASP attack ? a. A03:2021-Injection b. A02:2021-Cryptographic Failures c. A09:2021-Security Logging and Monitoring Failures d. A06:2021-Vulnerable and Outdated Components
A CEO fires her administrative assistant after the assistant was caught stealing companyfunds. Over the weekend, the administrative assistant hacks into the CEO’s private emailaccount and steals some personal data. What type of attack did the former employee most likely use to accomplish this exploit?a. Brute force attackb. War drivingc. Logic bombd. Deauthenticatione. Man-in-the-middle
Which of the following is NOT a purpose of a firewall?I've started developing a software to filter packets. To what extent may I expect assistance in the form of instructions?
An attacker may decrypt the ciphertext (message authentication code) by changing the tag or the MAC. Can you identify any issues with this plan? If this attack is successful, the victim may be able to decrypt a modified ciphertext from the original Tag.
Suppose you want to attack a target computer. There is a telnet service running on the target. You want to guess the credentials to logon to Telnet. Before you use any tool, what credentials can you try? If this fails, you must use a password cracking tool. What is the most appropriate tool to perform that attack? List and describe the steps you will take to guess the credentials.