a) A/An____attack overwhelms a system with numerous ICMP messages to exhaust the target system's resources. MAC spoofing ARP cache poisoning ping flood IP spoofing DNS poisoning b) A worm infecting another system in a LAN or across the network is said to be operating in which phase? execution propagation triggering dormant None of the above

a) A/An____attack overwhelms a system with numerous ICMP messages to exhaust the target system's resources. MAC spoofing ARP cache poisoning ping flood IP spoofing DNS poisoning b) A worm infecting another system in a LAN or across the network is said to be operating in which phase? execution propagation triggering dormant None of the above

Principles of Information Security (MindTap Course List)

6th Edition

ISBN:9781337102063

Author:Michael E. Whitman, Herbert J. Mattord

Publisher:Michael E. Whitman, Herbert J. Mattord

Chapter6: Security Technology: Access Controls, Firewalls, And Vpns

Section: Chapter Questions

Problem 2E

See similar textbooks

Similar questions

A Denial-of-Service (DoS) attack is where an attacker overloads a victim’s network or computer such that normal processing services cannot occur. Mallory launches an attack by manipulating the source address field of an ICMP request and using a network broadcast address as the destination address. What kind of DoS attack is Mallory executing? a. DNS-based DDoS b. DRDoS using UDP c. A ‘Smurf’ attack d. A ‘Ping of Death’ attack
From the diagram below, as an administrator of below networks, what are the risks may cause by Malware attacker to the hosts in the network 1. And what are the security tools you are recommended to install to secure operating systems.
a) Discuss the process of ARP spoofing with a diagram. b) Malicious users can spoof the MAC address of the legitimate user to hijack network sessions (in particular in the wireless network environment). Report how you will protect your network against such spoofing attacks.
0.10 Layer 2 security best practices can mitigate the threat of MAC flooding ARP poisoning ARP flooding All responses None of the responses
102 How does a cloud-based distributed denial-of-service (DoS) protection strategy help in the event of an attack? A.Having multiple end points B.Using round-robin load balancing C.Rerouting traffic to the mitigation services D.Scaling the receiving application
In addition to source and destination address and port information, stateful firewalls use a state flag to identify the current status of a connection. Which of the following possible state values indicates that the third step in the three-way handshake has been completed and a connection between two hosts has been created?SYN_RECVESTABLISHEDFIN_WAIT1CLOSED
2. Layer 2 security best practices include: Disable unused network device ports Disable CDP Implement port security Implement 802.1X All responses 3. Actions to minimize network attack surfaces and attack vectors could include Defense in depth practices De-militarized zones for public facing system services Control inbound and outbound network access via firewalls All available answers
Match the following to one or more layers of the OSI model: c. If a firewall malfunctions, which aspect of FCAPS does the situation fall under? Why?Function Layeri. Route determinationii. Interface to transmission mediaiii. Flow controliv. Provides user services such as e-mail and filetransferv. Error correction and retransmissionvi. Responsible for carrying frames between adjacentnodes
When an attacker tries to overwhelm a target's Internet connection, website, or server through the Internet, they are attempting a distributed denial of service (DDoS). A distributed denial of service (DDoS) assault is more extensive and sophisticated than a single-computer or single-machine based denial of service attack. The success of a distributed denial of service (DDoS) assault requires the attacker to orchestrate the simultaneous activities of many computers and systems across the Internet, often making use of bots and other automated tools. If a distributed denial of service (DDoS) assault is launched, not even the most robust infrastructure can withstand the influx of traffic.
Which of the following does not qualify as a host virtualization benefit? a. Penetration testing can be done on a computer using a simulated network environment and several virtual computers. b. Only one piece of anti-virus software is necessary. c. Security patches can be tested. d. The host operating system can be virtualized for training purposes.
What tools allows for the secure transferring of files between systems? a) ssh b) ssh-agent c) telnet d) scp
3.14 LAB: Detecting Network Change (files and lists) Please help! Please see pic attached. Securing a network from attacks means a network administrator is watching traffic and user activity. Change detection (CD) is a method used to track changes in your network. CD can detect files accessed during off hours to more complex algorithmic detections added to software applications that manage this process. This program is going to manage user login times and attempt to detect any change in a users typical login attempts. It will use an input file to store data and read the file using the csv.reader( ) method. The file will contain a list of login_names, followed by login_time separated by commas. Write a program that first reads in the name of an input file, reads the information stored in that file and determines if the user login has occurred at off hour times. The company employees work from 9 am to 5 pm so any other time would be an off hour login attempt. If the login attempt is made…