Question 1

Which of the following is NOT one of the four goals to consider when creating a secure networking environment?

Accepted Answer

Cost is not one of the primary goals of creating a secure networking environment, which typically focuses on confidentiality, integrity, and availability.

Question 2

________ refer to ways of attacking networks.

Accepted Answer

Attack vectors are methods or pathways used by attackers to gain unauthorized access to a network or system.

Question 3

The castle model describes when ________.

Accepted Answer

The castle model is a security concept where the "good guys" are considered to be inside the network (like the inhabitants of a castle), and the attackers are on the outside, trying to breach the defenses.

Question 4

________ describes the idea that creating a 100 percent secure network is not possible.

Accepted Answer

The concept of "The death of the perimeter" acknowledges that in modern networks, especially with the advent of cloud computing and mobile devices, it's impossible to create a network that is completely secure against all threats. This idea moves away from the traditional notion of a well-defined network perimeter that could be secured against unauthorized access.

Question 5

IDS refers to ________.

Accepted Answer

IDS stands for Intrusion Detection System, which is used to detect unauthorized access or anomalies within a network or system, hence "internal intrusion detection" is the correct choice.

Question 6

Functionality and access control are two of the four goals to consider when securing networks.

Accepted Answer

Functionality and access control are indeed two of the four primary goals in network security, alongside confidentiality and integrity. These goals help ensure that the network operates effectively while protecting data and resources from unauthorized access.

Question 7

DoS attacks are one of the least common types of network attacks against corporations.

Accepted Answer

DoS (Denial of Service) attacks are actually among the most common types of network attacks against corporations, as they are relatively easy to execute and can cause significant disruption to services and operations.

Question 8

In the castle model of network defense, there was a well-guarded single point of entry.

Accepted Answer

In the castle model of network defense, the strategy is similar to a medieval castle, focusing on protecting a network with a single, well-guarded point of entry, akin to a castle's drawbridge.

Question 9

The "death of the perimeter"
model has no distinct perimeter and there are multiple ways of entering the network.

Accepted Answer

The answer of The "death of the perimeter"
model has no...

Question 10

When a "bad guy"
ends up being an employee, "death of the perimeter"
is confirmed.

Accepted Answer

The answer of When a "bad guy"
ends up being an...

Question 11

________ attempts to make a server or network unavailable to legitimate users.

Accepted Answer

A DoS (Denial of Service) attack is a cyber-attack in which the attacker seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet.

Question 12

The ultimate goal of a DoS attack is ________.

Accepted Answer

The answer of The ultimate goal of a DoS attack...

Question 13

A common occurrence with news aggregators like Slashdot or The Huffington Post is ________.

Accepted Answer

News aggregators like Slashdot or The Huffington Post often experience a significant increase in web traffic due to referrals from large sites, which can lead to what is known as the "Slashdot effect" or similar phenomena where a smaller site gets overwhelmed by the sudden influx of visitors.

Question 14

Which of the following is NOT one of the main DoS attack methods?

Accepted Answer

Degrade services is not a specific method of DoS attack; it is a potential outcome of such attacks. The main methods include direct/indirect, intermediary, and reflected attacks.

Question 15

Which of the following is the simplest form of a DoS attack?

Accepted Answer

The answer of Which of the following is the simplest...

Question 16

A DoS attack begins when a ________ sends a signal for the bots to attack a victim.

Accepted Answer

A botmaster, also known as a bot herder, is the controller of a botnet, which is a network of infected computers or "bots". When a DoS (Denial of Service) attack is initiated, the botmaster sends a command to these bots to target and overwhelm a specific server or network resource, causing the service to become unavailable to legitimate users.

Question 17

Which of the following is the second primary DoS method used by attackers?

Accepted Answer

Intermediary attacks, also known as Distributed Denial of Service (DDoS) attacks, involve using multiple compromised systems to target a single system, making it a primary method used by attackers after direct attacks.

Question 18

________ is the process of hiding an attacker's source IP address.

Accepted Answer

Spoofing is the technique used to hide an attacker's source IP address by making the traffic appear as if it is coming from another source.

Question 19

Which of the following occurs when an attacker sends numerous TCP SYN segments to a victim server?

Accepted Answer

A SYN flood is a type of Denial of Service (DoS) attack where an attacker sends a succession of SYN requests to a target's system in an attempt to consume enough server resources to make the system unresponsive to legitimate traffic.

Question 20

A side effect of an attacker spoofing an IP address is ________.

Accepted Answer

Backscatter is a side effect of an attacker spoofing an IP address, where the responses from the attacked network inadvertently return to the spoofed addresses.

Quiz 4: Secure Networks