CTC 452 Quiz 3 – Flashcards
Unlock all answers in this set
Unlock answers
question
Suspicious CRC value
answer
Which of the following is NOT a category of suspicious TCP/IP packet?
question
RST
answer
Which TCP flag can be the default response to a probe on a closed port?
question
Multiple-packet attack
answer
Of what category of attack is a DoS attack an example?
question
False
answer
All devices interpret attack signatures uniformly.
question
They can share information about attack signatures
answer
How does the CVE standard make network security devices and tools more effective?
question
IP address, TCP flags, port numbers
answer
Which of the following is an accurate set of characteristics you would find in an attack signature?
question
False Negative
answer
What is the term used when an IDPS doesn't recognize that an attack is underway?
question
SYN, SYN ACK, ACK
answer
What is the sequence of packets for a successful three-way handshake?
question
Strobe Scan
answer
In which type of scan does an attacker scan only ports that are commonly used by specific programs?
question
Reconnaissance
answer
Under which suspicious traffic signature category would a port scan fall?
question
False
answer
An atomic attack is a barrage of hundreds of packets directed at a host.
question
Xmas Scan
answer
Which type of scan has the FIN, PSH, and URG flags set?
question
Checksum
answer
What can an IDPS check to try to determine whether a packet has been tampered with or damaged in transit?
question
Flags
answer
Which of the following is an element of the TCP header that can indicate that a connection has been established?
question
HTTP Get
answer
What is the packet called where a Web browser sends a request to the Web server for Web page data?
question
back door
answer
What type of attack does a remote-access Trojan attempt to perpetrate?
question
True
answer
Packet fragmentation is not normal, and can only occur if an attack has been initiated.
question
Flags
answer
Which of the following is an element of the TCP header that can indicate that a connection has been established?
