click below
click below
Normal Size Small Size show me how
Chapter 9 Essentials
Security+ SY0-501 7th Edition Exam Essentials (Chapter 9)
Question | Answer |
---|---|
Be able to describe the various types of attacks to which your systems are exposed. | Your network is vulnerable to DoS attacks caused by either a single system or multiple systems. Multiple-system attacks are called DDoS. Your systems are also susceptible to access, modification, and repudiation attacks. |
Be able to describe the methods used to conduct a backdoor attack. | Backdoor attacks occur using either existing maintenance hooks or developmental tools to examine the internal operations of a program. Can refer to inserting into a machine a program or service that allows authentication to be bypassed and access gained. |
Know how a spoofing attack occurs. | Spoofing attacks occur when a user or system masquerades as another user or system. Spoofing allows the attacker to assume the privileges and access rights of the real user or system. |
Be able to describe a man-in-the-middle attack. | Based on the principle that a system can be placed between two legitimate users to capture or exploit the information being sent between them. Both sides of the conversation assume that the man in the middle is the other end and communicate normally. |
Be able to describe a replay attack. | Captures information from a previous session and attempts to resend it to gain unauthorized access. This is especially effective in environments where a user ID and password are sent in the clear across a large network. |
Know the characteristics and types of viruses used to disrupt systems and networks. | Several different types of viruses are floating around today. The most common ones are polymorphic viruses, stealth viruses, retroviruses, multipartite viruses, and macro viruses. |
Be able to explain the characteristics of Trojan horses and logic bombs. | Trojan horses are programs that enter a system or network under the guise of another program. Logic bombs are programs or snippets of code that execute when a certain predefined event occurs. |
Be able to describe how antivirus software operates. | Looks for a signature in the virus to determine what type of virus it is. The software then takes action to neutralize the virus based on a virus definition database. Virus definition database files are regularly made available on vendor sites. |