Ethical Hacking and Network Defense Test Preparation
Course Introduction
This course provides an in-depth introduction to ethical hacking techniques and network defense strategies. Students will explore the methodologies used by attackers to compromise systems and learn how to ethically identify vulnerabilities in computer networks. Topics include penetration testing, security assessments, vulnerability analysis, and the latest defense solutions, such as firewalls, intrusion detection systems, and cryptography. Through hands-on labs and real-world scenarios, students will develop practical skills in ethical hacking while emphasizing legal and ethical considerations in cybersecurity practice.
Recommended Textbook
CompTIA Security Guide to Network Security Fundamentals 6th Edition by Mark Ciampa
Available Study Resources on Quizplus
15 Chapters
750 Verified Questions
750 Flashcards
Source URL: https://quizplus.com/study-set/2311
Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45966
Sample Questions
Q1) The Sarbanes-Oxley Act restricts electronic and paper data containing personally identifiable financial information.
A)True
B)False
Answer: False
Q2) Which of the following describes various supporting structures for implementing security that provides a resource of how to create a secure IT environment? (Choose all that apply. )
A)regulatory frameworks
B)reference architectures
C)industry-standard frameworks
D)reference frameworks
Answer: B,C
Q3) Which of the following is a common security framework? (Choose all that apply. )
A)ISO
B)COBIT
C)RFC
D)ASA
Answer: A,B,C
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45967
Sample Questions
Q1) Which type of phishing attack targets specific users?
A)target phishing
B)whaling
C)vishing
D)spear phishing
Answer: D
Q2) What specific type of phishing attack uses the telephone to target a victim?
A)target phishing
B)whaling
C)vishing
D)spear phishing
Answer: C
Q3) Social engineering impersonation means to masquerade as a real or fictitious character and then play out the role of that person on a victim.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
4
Chapter 3: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45968
Sample Questions
Q1) Which of the following is a public key system that generates random public keys that are different for each session?
A)ephemeral-secrecy
B)perfect forward secrecy
C)public secrecy
D)random-key exchange
Answer: B
Q2) A collision attack is an attempt to find two input strings of a hash function that produce the same hash result.
A)True
B)False
Answer: True
Q3) Encryption is the practice of transforming information so that it is secure and cannot be accessed by unauthorized parties.
A)True
B)False
Answer: False
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Advanced Cryptography and PKI
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45969
Sample Questions
Q1) At what stage can a certificate no longer be used for any type of authentication?
A)creation
B)suspension
C)revocation
D)expiration
Q2) What is the S/MIME protocol used for?
Q3) Digital certificates should last forever.
A)True
B)False
Q4) What block cipher mode of operation encrypts plaintext and computes a message authentication code to ensure that the message was created by the sender and that it was not tampered with during transmission?
A)Electronic Code Book
B)Galois/Counter
C)Cipher Block Chaining
D)Counter
Q5) Stream ciphers work on multiple characters at a time.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Networking and Server Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45970
Sample Questions
Q1) A DNS amplification attack floods an unsuspecting victim by redirecting valid responses to it.
A)True
B)False
Q2) An attack in which the attacker attempts to impersonate the user by using his or her session token is known as:
A)Session replay
B)Session spoofing
C)Session hijacking
D)Session blocking
Q3) An attack that takes advantage of the procedures for initiating a session is known as what type of attack?
A)DNS amplification attack
B)IP spoofing
C)smurf attack
D)SYN flood attack
Q4) What are zero-day attacks?
Q5) What are some of the typical server attacks used by attackers?
Q6) What is the basis for domain name resolution of names-to-IP addresses?
Q7) How does a buffer overflow attack occur?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Network Security Devices, Design, and Technology
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45971
Sample Questions
Q1) What data unit is associated with the Open Systems Interconnection layer two?
A)segment
B)packet
C)frame
D)bit
Q2) What type of network access control uses Active Directory to scan a device to verify that it is in compliance?
A)agentless NAC
B)dissolvable NAC
C)dependent NAC
D)permanent NAC
Q3) Which of the following is defined as a security analysis of the transaction within its approved context?
A)USB blocking
B)content inspection
C)storage sensors
D)data loss prevention
Q4) Describe how Network Access Control (NAC)works.
Q5) Discuss the two advantages that NAT provides.
Q6) Describe how VLAN communication takes place. Page 8
To view all questions and flashcards with answers, click on the resource link above.
Page 9
Chapter 7: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45972
Sample Questions
Q1) How can a network of physical devices be grouped into logical units,regardless of what network switches they may be connected to?
A)VLAN
B)subnets
C)IP address
D)MAC address
Q2) When setting up a server virtualization environment,what component below manages the virtual machine operating systems and supports one or more guest systems?
A)kernel
B)supervisor
C)hypercard
D)hypervisor
Q3) Which of the following protocols is unsecured?
A)HTTPS
B)TLS
C)SSL
D)FTP
Q4) Explain the basic operating principals used in software defined networking.
Q5) Discuss the Software as a Service (SaaS)model used in cloud computing.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 8: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45973
Sample Questions
Q1) In a bluesnooping attack,the attacker copies emails,calendars,contact lists,cell phone pictures,or videos by connecting to the Bluetooth device without the owner's knowledge or permission.
A)True
B)False
Q2) Bluetooth is an example of what type of technology below?
A)Small Area Network
B)Private Area Network
C)Personal Area Network
D)Limited Area Network
Q3) What type of radio frequency transmissions are used by Bluetooth devices?
A)single-range radio
B)long-range radio
C)short-range radio
D)ultra-short-range radio
Q4) The MAC address is a unique 64-bit number that is "burned" into the network interface card adapter when it is manufactured.
A)True
B)False
Q5) Discuss how to prevent bluesnarfing.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 9: Client and Application Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45974
Sample Questions
Q1) Explain the security advantages of "code signing" and "stored procedure"?
Q2) A spiked collar that extends horizontally for up to 3 feet from the pole is an example of what kind of technology?
A)Anti-climb
B)Spiked barrier
C)Roller barrier
D)Rotating spikes
Q3) What U.S.government classified standard is intended to prevent attackers from picking up electromagnetic fields from government buildings?
A)RAIN
B)EMIF
C)TEMPEST
D)MaSec
Q4) What specific process in application development removes a resource that is no longer needed?
A)deprovisioning
B)version control
C)change management
D)baselining
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 10: Mobile and Embedded Device Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45975
Sample Questions
Q1) What can be enabled to prevent a mobile device from being used until a user enters the correct passcode,such as a pin or password?
A)Enable a smart card
B)Enable a lock screen
C)Enable a sleep time setting
D)Enable a challenge-response screen
Q2) Describe a notebook computer in relation to a laptop computer.
Q3) How is the coverage area for a cellular telephony network usually divided in a typical city?
A)Hexagon shaped cells.
B)Square square shaped cells.
C)Triangle shaped cells.
D)Circular shaped cells.
Q4) Select the option that represents a wearable technology.
A)Android
B)iPhone
C)Google Chromebook
D)Google Glass
Q5) How does BYOD increase employee performance?
Q6) How might an attacker misuse a QR code?
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 11: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45976
Sample Questions
Q1) Which of the following accounts is a user account that is created explicitly to provide a security context for services running on a server?
A)service account
B)shared account
C)system account
D)privileged account
Q2) What smartcard standard is used to cover all U.S.government employees?
Q3) Which of the following are key stretching password hash algorithms? (Choose all that apply. )
A)bcrypt
B)PBKDF2
C)seq02
D)SHA-256
Q4) The use of one authentication credential to access multiple accounts or applications is referred to as which of the following?
A)individual Sign On
B)single Sign On
C)unilateral Sign On
D)federated Sign On
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 12: Access Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45977
Sample Questions
Q1) What standard provides a greater degree of security by implementing port-based authentication and blocks all traffic on a port-by-port basis until the client is authenticated using credentials stored on an authentication server?
A)IEEE 802.1a
B)IEEE 802.1x
C)LDAPS
D)TACACS
Q2) Describe the MAC lattice model.
Q3) Which of the following controls can be implemented so an organization can configure multiple computers by setting a single policy for enforcement?
A)group-based access control
B)computer-based access control
C)role-based access control
D)system access control
Q4) Discuss the differences between DAP and LDAP.
Q5) Authentication,authorization,and accounting are sometimes called AAA.
A)True
B)False
Q6) Describe LDAP injection attacks.
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 13: Vulnerability Assessment and Data Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45978
Sample Questions
Q1) If a user uses the operating system's "delete" command to erase data,what type of data removal procedure was used?
A)wiping
B)purging
C)degaussing
D)data sanitation
Q2) When a security hardware device fails or a program aborts,which state should it go into?
Q3) What type of scanner sends "probes" to network devices and examine the responses received back to evaluate whether a specific device needs remediation?
A)active
B)non-intrusive
C)passive
D)intrusive
Q4) List and describe two common uses for a protocol analyzer.
Q5) The second step in a vulnerability assessment is to determine the assets that need to be protected.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 14: Business Continuity
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45979
Sample Questions
Q1) When the remaining cluster space of a partially filled sector is padded with contents from RAM.What is the name for this type of scenario?
A)Disk slack
B)RAM slack
C)ROM slack
D)Edge slack
Q2) What kind of slack is created from information stored on a hard drive,which can contain remnants of previously deleted files or data?
A)RAM slack
B)Edge slack
C)Drive file slack
D)Sector slack
Q3) Select below the type of cluster where standby server exists only to take over for another server in the event of its failure.
A)symmetric network
B)symmetric server
C)asymmetric network
D)asymmetric server
Q4) Why should redundant networks be implemented in many enterprise environments?
To view all questions and flashcards with answers, click on the resource link above. Page 17
Chapter 15: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45980
Sample Questions
Q1) Vendor-specific guides are useful for configuring web servers,operating systems,applications servers,and network infrastructure devices.
A)True
B)False
Q2) What is a risk register?
Q3) Websites that group individuals and organizations into clusters or groups based on some sort are considered to be what type of networks?
A)social media network
B)social engineering network
C)social management network
D)social control network
Q4) What specific type of mechanism should be utilized by all types of training to provide input from participants on the training's effectiveness so that any needed modifications can be made for future training?
A)participant feedback mechanism
B)survey feedback mechanism
C)training mechanism
D)feedback mechanism
To view all questions and flashcards with answers, click on the resource link above. Page 18