Comp. Sec Mods. 4&5

Questions from modules 4&5

In a DNS poisoning attack, what does the attacker attempt to do?

A) Flood the network with DNS queries

B) Replace legitimate IP addresses with fake ones

C) Change DNSSEC configuration

B) Replace legitimate IP addresses with fake ones

Which protocol is commonly used in DDoS attacks due to its connectionless nature?

A) TCP

B) UDP

C) HTTP

D) SMTP

B) UDP

What is a domain hijacking attack?

A) Taking control of a domain by changing its registration details

B) Redirecting traffic from a domain to another

C) Flooding a domain with requests

A) Taking control of a domain by changing its registration details

How does a TCP SYN flood DDoS attack work?

A) It sends a large number of TCP SYN packets to exhaust server resources

B) It sends data packets with high payloads

D) It sends repeated SYN-ACK packets

A) It sends a large number of TCP SYN packets to exhaust server resources

What is the primary characteristic of UDP in networking?

A) Connection-oriented

B) Reliable

C) Connectionless

D) Error correction

C) Connectionless

UDP is commonly used in:

A) Web browsing

B) Streaming video and online gaming

C) Email communication

D) File transfers

B) Streaming video and online gaming

Which of the following is a method attackers use to perform domain hijacking?

A) Exploiting weak passwords on domain registrar accounts

B) Using phishing emails to steal domain login credentials

C) Gaining unauthorized access to the registrar’s system

D) All of the above

D) All of the above

What is the primary goal of a DDoS attack?

A) To steal sensitive information

B) To interrupt the normal traffic of a targeted server

C) To install malware on a victim’s machine

D) To perform SQL injection attacks

B) To interrupt the normal traffic of a targeted server

Which type of DDoS attack targets the application layer?

A) UDP flood

B) ICMP flood

C) SYN flood

D) HTTP flood

D) HTTP flood

What protocol does ARP poisoning manipulate?

A) DNS

B) TCP

C) ARP

D) HTTP

C) ARP

What is a potential effect of ARP poisoning?

A) Man-in-the-Middle attack
B) Faster data transmission
C) Improved security
D) Data encryption

A) Man-in-the-Middle attack

Which of the following is a prevention method for ARP poisoning?

A) Packet Filtering
B) Using FTP
C) Disabling the firewall
D) Installing antivirus software

A) Packet Filtering

What is the primary goal of a MITM attack?

A) Interrupt internet connection
B) Eavesdrop and alter communication
C) Damage hardware
D) Improve communication speed

B) Eavesdrop and alter communication

Which technique is commonly used in MITM attacks?

A) Keylogging
B) ARP Poisoning
C) Ransomware
D) SQL Injection

B) ARP Poisoning

What is a common outcome of a MITM attack?

A) Data Theft
B) Faster Internet
C) Software Crash
D) Improved Security

A) Data Theft

How can MITM attacks be prevented?

A) Use strong passwords only
B) Rely on public Wi-Fi
C) Use HTTPS and SSL/TLS
D) Disable firewalls

C) Use HTTPS and SSL/TLS

What network security practice helps prevent MITM attacks?

A) Disable firewalls
B) anti-spoofing tools
C) Installing antivirus
D) Avoiding software updates

B) anti-spoofing tools

What is the purpose of POPS?

A. To retrieve emails over an unsecured connection

B. To encrypt the body of emails for privacy

C. To retrieve emails securely using SSL/TLS

C. To retrieve emails securely using SSL/TLS

What is the primary function of S/MIME?

A. To encrypt the connection between client and server

B. To secure email content with encryption and digital signatures

C. To compress email attachments

D. To provide authentication for email servers

B. To secure email content with encryption and digital signatures

Which of the following is a real-world example of S/MIME usage?

A. Encrypting online chat messages

B. Sending a digitally signed contract via email

C. Securely accessing a website with HTTPS

D. Verifying the sender of a text message

B. Sending a digitally signed contract via email

What is the main purpose of SSL/TLS in network communication?

A. To compress data

B. To encrypt and secure data transmission

C. To speed up connections

D. To limit bandwidth usage

B. To encrypt and secure data transmission

What does SSL stand for?

A. Secure Socket Layer

B. Secure Software Layer

C. Secure Source Link

D. Secure System Lock

A. Secure Socket Layer

During the SSL/TLS handshake, which process occurs first?

A. Data encryption

B. Certificate exchange

C. Decryption

D. Key agreement

B. Certificate exchange

SSL/TLS certificates are issued by which of the following?

A. Internet Service Providers

B. Certification Authorities

C. Domain Registrars

D. Network Administrators

B. Certification Authorities

Which of the following attacks does SSL/TLS help prevent?

A) Denial of Service

B) Man-in-the-Middle

C) Phishing

D) SQL Injection

B) Man-in-the-Middle

What is the primary purpose of SRTP in VoIP applications?

A) Enhancing video resolution

B) Providing secure, encrypted voice and video data transmission

C) Reducing bandwidth consumption

D) Increasing call duration limits

B) Providing secure, encrypted voice and video data transmission

SRTP is commonly used in which type of communication?

A) Email services

B) Real-time video conferencing and VoIP calls

C) File storage systems

D) Website browsing

B) Real-time video conferencing and VoIP calls

What is the main purpose of LDAP?

A) Storing multimedia files

B) Managing directory information services

C) Hosting web servers

D) Encrypting email communication

B) Managing directory information services

Which protocol does LDAP typically use for secure communication?

A) HTTPS

B) FTPS

C) LDAPS (LDAP over SSL/TLS)

D) SMTP

C) LDAPS (LDAP over SSL/TLS)

What does HTTPS stand for?

A) Hyper Transfer Text Secure

B) Hypertext Transfer Protocol Secure

C) Hypertext Transfer Protocol Standard

D) Hypertext Transmission Protocol Secure

B) Hypertext Transfer Protocol Secure

Which protocol does HTTPS rely on for encryption?

A) FTP

B) SSL/TLS

C) SMTP

D) SSH

B) SSL/TLS

What is the main purpose of HTTPS?

A) To speed up data transmission

B) To secure data transmitted between the web server and the browser

C) To allow multimedia content on web pages

D) To compress data before transmission

B) To secure data transmitted between the web server and the browser

What is the primary purpose of SNMP?

A) To manage and monitor network devices

B) To encrypt data for secure communication

C) To transfer files between devices

D) To establish video connections over the network

A) To manage and monitor network devices

In which mode does IPsec encrypt only the payload of the IP packet?

A) Tunnel Mode

B) Transport Mode

C) Hybrid Mode

D) Secure Mode

B) Transport Mode