Save
Upgrade to remove ads
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

ITN 261 CHAP 5

QuestionAnswer
If you receive a RST packet back from a target host, what do you know about your target? The source port in the RST message is closed.
What is the difference between a SYN scan and a full connect scan? The SYN scan doesn't complete the three-way handshake.
What is one reason a UDP scan may take longer than a TCP scan of the same host? UDP will retransmit more. UDP has more ports to scan. UDP is a slower protocol. UDP requires more messages to set up. UDP is a slower protocol.
Why does an ACK scan not indicate clearly that ports are open? The scanner has to guess. ACK is not a supported flag. The target system ignores the message. ACK scans cause a lot of retransmits. The target system ignores the message.
What is one reason for using a scan like an ACK scan? It may get through firewalls and IDS devices. It is better supported. The code in nmap is more robust. An ACK scan is needed for scripting support. It may get through firewalls and IDS devices.
What does nmap look at for fingerprinting an operating system? The operating system headers The application version The response from connecting to port 0 The IP ID field and the initial sequence number The IP ID field and the initial sequence number
What is nmap looking at when it conducts a version scan? TCP and IP headers Application banners Operating system kernel IP ID and TCP sequence number fields Application banners
What is an advantage of using masscan over nmap ? masscan can scan more addresses faster.
If you were to see hping -S -p 25 10.5.16.2, what would you assume? Someone was trying to probe an email port on the target.
If you were to see that someone was using OpenVAS, followed by Nessus, what might you assume? They were trying to reduce false positives.
What is the difference between a false positive and a false negative? A false positive indicates a finding that doesn't exist, while a false negative doesn't indicate a finding that does exist.
What would be the purpose of running a ping sweep? All of the above. You want to identify responsive hosts without a port scan. You want to use something that is light on network traffic. You want to use a protocol that may be allowed through the firewall.
Which of these may be considered worst practice when it comes to vulnerability scans? Scanning production servers Notifying operations staff ahead of time Taking no action on the results Using limited details in your scan reports Taking no action on the results
Which of these may be considered an evasive technique? Scanning nonstandard ports Encoding data Using a proxy server Using nmap in blind mode Encoding data
If you were to notice operating system commands inside a DNS request while looking at a packet capture, what might you be looking at? Tunneling attack DNS amplification DNS recursion XML entity injection Tunneling attack
What is an Xmas scan? TCP scan with SYN/ACK/FIN set UDP scan with FIN/PSH set TCP scan with FIN/PSH/URG set UDP scan SYN/URG/FIN set TCP scan with FIN/PSH/URG se
What would you use MegaPing for? Running exploits Running a port scan Issuing manual web requests Crafting packets Running a port scan
What would be a reason to use the Override feature in OpenVAS? You want to run a different plugin for a vulnerability. You want to change the scanner settings. You want to use TCP rather than UDP. You want to change a severity rating on a finding. You want to change a severity rating on a finding.
What would you use credentials for in a vulnerability scanner? Better reliability in network findings Authenticating through VPNs for scans Scanning for local vulnerabilities Running an Active Directory scan Scanning for local vulnerabilities
What is fragroute primarily used for? Altering network routes Capturing fragmented packets Fragmenting application traffic Fragmenting layer 2 and layer 3 headers Fragmenting application traffic
Created by: ESIMPSON23
 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards