Cyber Exam 1

Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 1. Illegal access to a computer or network systems: DOJ definition of a hacker 2. Attempts to break into a company's network or applications to find weak links within the permission: Ethical Hacker/Penetration Test 3. Tester attempts to enumerate all the vulnerabilities found in an application or on a system: Vulnerability Assessment 4. Analyzes company's security policy and procedures: Security Test 5. Reports problems to the company: Penetration Testers 6. Might be required to offer solutions for securing or protecting a network: Security Tester 7. Accesses a computer system or network without the authorization of the system's owner: Hacker 8. Those who break into systems to steal or destroy data; no distinction between hackers and crackers: Crackers 9. Bad Hackers aren't always looking for ways to exploit vulnerabilities: False 10. People who hack computer systems for political or social reasons: Hacktivists 11. The tester is told what network topology and technology the company is using and is given permission to interview IT personnel and company employees: White Box Model 12. Management doesn't divulge to staff that penetration testing is being conducted nor does it I've the tester any diagrams or describe what technologies that company is using: Black Box Model 13. Hybrid of the white and black box model gives the tester only partial information: Gray Box Model 14. Covers applicable applications uses COMPTIA: Certification Programs for Network Security Personnnel 15. An advanced certification that requires students to demonstrate hands-on abilities to earn their certificates; covers network and application exploits: Offensive Security Certified Professional 16. Developed by International Council of Electronic Commerce Consultants; exam based on 22 domains: Certified Ethical Hacker 17. Nonprofit organization that provide security training and certification programs for security professionals: Institute for Security and Open Methodologies 1 / 17 Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 18. Designed by the Institute for Security and Open Methodologies; Covers Professionalism; Enumeration; Assessments; Application; Verification- : Open Source Security Testing Methodology Manual Professional Security Tester 19. Issued by the International Information System Security Certification Consortium; Became one of the standards for many security professionals; doesn't require prior IT knowledge; Concerned with policies and procedures than tools for conducting security tests: Certified Information System Professional 20. Offers training and IT security certifications through Global Information Assurance Certification; Popular document is the Top 25 software errors list: SANS Institute 21. Both penetration and security testers need technical skills to perform their duties effectively: True 22. Contact your local law enforcement agencies to find out about laws in your state: True 23. Acceptable use policy does not limit your ability to penetrate: False 24. Some states consider port scanning a noninvasive or nondestructive act and deem it legal: True 25. Federal laws are applicable to all states including hacking so if you commit a crime in one state Federal laws will apply: True 26. A set of instructions that run in sequence to preform a task: Script 27. File permissions are represented by bits: True 28. Octal numbering system uses 8 as its base and supports values...: 0-7 29. A common use for base-64 is encoding and transportation of binary files through email: True 30. Attackers can use this to obfuscate their actions: Base-64 31. HTML is mainly used for the web: True 32. Perl is not interceptive: False 33. It is possible to write a program without bugs: False 34. Created using HTML; Display the same info regardless of time: Static Web Pages 35. Makes it a federal crime to access classified information or financial information without authorization: The Computer Fraud and Abuse Act Title. 18 Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 36. Makes it illegal to intercept any communication regardless of how it was transmitted: Electronic Communication Privacy Act. Title 18 37. Amended Chapter 119 of Title 18 U.S. Code: US PATRIOT Act Sec 217 38. IPV4 is still widely used: True 39. The language computers use to communicate with one another; most widely used is Transmission Control Protocol/ Internet Protocol (TCP/IP): Protocol 40. Physically moves bits across a medium: Network Layer 41. Responsible for routing packets using IP address: Internet Layer 42. Is concerned with controlling flow of data: Transport Layer 43. Where applications and protocols such a HTTP and Telnet operate: Application Layer 44. The primary protocol used to communicate over the Web: Hypertext Transfer Protocol 45. Allows different OSs to transfer files between one another: File Transfer Protocol 46. The main protocol for transmitting e-mail across the internet: Simple Mail Transfer Protocol 47. Enables users to securely log onto a remote server and issue command interactively: Secure Shell 48. Enables multiple users to communicate over the internet in discussion forums: Internet Relay Chat (IRC) 49. Enables users to insecurely log on to a remote server and issue commands interactively: Telnet 50. A TCP Flag that acknowledges a TCP packet with SYN-ACK flags set: ACK 51. A protocol for transferring data over a network that requires a session connection before data is sent. In TCP/IP this step is accomplished by sending a SYN packet: Connection-Oriented Protocol 52. With a connectionless protocol no session connection is required before data is transmitted. UDP and IP are examples of connectionless protocols: Connectionless 53. A number that keeps track of what packets a node has received: Initial Sequence Number Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 54. The organization responsible for assigning IP addresses: Internet Assigned Numbers 55. The protocol used to send informational messages and test network connectivity: Internet Control Message Protocol 56. The logical component of a connection that identifies the service running on a network device. Ex: Port 110 is the POP3 mail service: Port 57. An attack on a network that requires guessing ISNs: Session Hijacking 58. A TCP flag that signifies the beginning of a session: SYN 59. A reply to a SYN packet sent by a host: SYN-ACK 60. The six flags in a TCP header are switches that can be sent to on or off to indicate the status of a port or service: TCP Flag 61. The method the Transport layer uses to create a connection-oriented session: Three-Way Handshake 62. The main protocol used to connect computers over the internet: Transmission Control Protocol/Internet Protocol 63. A fast, unreliable Transport layer protocol that's connectionless: User Datagram Protocol 64. Takes you from one area of a program to another area: Branching 65. The act of performing a task over and over: Looping 66. Is conducted on a variable and returns a value of true or false: Testing 67. A set of directions used to solve a problem: Algorithm 68. In object-oriented programming the structure that holds pieces of data and functions: Class 69. An English-like language you can use to help create the structure of your program: Pseudocode 70. Adds comments to the code that explains what you're doing: Documentation**** 71. A combination of hexadecimal numbers and expressions such as mov, add, and sub so writing programs intros language is easier than in machine language: Assembly Language 72. A program that converts a text-based program called source code into executable or binary code: Compiler Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 73. Represents a numeric or string value: Variable**** 74. Tells the compiler how to convert the value in a function: Conversion Specifiers 75. A mini program within a main program that performs a particular task: Function 76. Repeats an action a certain number of times; checks whether a condition is true and then continues looping until the condition becomes false: While Loop 77. Performs a test on a variable and then exits the block when a certain condition is met: For Loop 78. Performs an action first and then tests to see whether the actions should continue to occur: Do Loop 79. A markup language used mainly for indicating the formatting and layout of a web page: HTML**** 80. A high-level general purpose programming language used especially for developing Web applications developed by Larry Wall in 1987: PERL**** 81. An interface to the Windows OS that programmers can use to access information about a computer running Windows such as the computer name, OS name, and so forth: WIN API**** 82. A flexible, object-oriented programming language similar to PERL: RUBY**** 83. An error that results when an instruction does not follow the syntax rules or grammar of the programming language: Syntax Error**** 84. A term for code executed directly by a computer central processing unit. The most basic computer language: Machine Code**** 85. A scripting language for creating dynamic Web Pages: Active Server Pages 86. A programming interface for connecting a Web application to a database: ActiveX Data Objects 87. A Web development technique used for interactive Web sites like Facebook and Google Apps; this development technique makes it possible to create the sophisticate interface found on desktop programs: Asynchronous JavaScript and XML (AJAX) Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 88. A server-side scripting language for creating dynamic Web pages; supports a wide variety of databases and uses a proprietary markup language known as CFML: ColdFusion 89. An interface that passes data between a web server and a web browser: Common Gateway Interface 90. Web pages that can change on the fly depending on variables such as the date or time of day: Dynamic Web Pages 91. A set of interfaces enabling Web applications to access diverse database management system: Object Linking and Embedding Data Base 92. A type of exploit that takes advantage of poorly written applications; an attacker can issue statements by using a Web browser to retrieve data, changing server settings or possibly gain control of the server: SQL Injection 93. Web Pages that display the same information whenever they're accessed: Static Web Pages 94. A pointer to a physical directory on a Web server: Visual Directory 95. A web-based application designed to teach security professionals about Web application vulnerabilities: WebGoat 96. TCP is open thus allowing anyone to develop applications and services: True 97. The language used by computers to communicate with one another over the internet: Protocol 98. A suite of communication protocols used to interconnect network devices on the internet; contains four different layers: TCP/IP 99. Concerned with physically moving bits across a medium; usually includes network services and client software • HTTP • FTP • SMTP • SNMP • SSH • IRC • Telent: Application Layer 100. Responsible for getting data packets to and from the application layer by using port numbers; TCP also verifies packet delivery by using acknowledgement: Transport Layer 6 / 17 Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 101. Uses IP addresses to route packets to the correct destination network: Internet Layer 102. Represents the physical network pathway and the network interface card: Network Layer 103. The primary protocol used to communicate over the Web: Hyper Text Transfer Protocol (HTTP) 104. Allows different operating systems to transfer files between one another: File Transfer Protocol (FTP) 105. The main protocol for transmitting e-mail messages across the internet: Simple Mail Transfer Protocol (SMTP) 106. Primarily used to monitor devices on a network such as monitoring a router's state remotely: Simple Network Management Protocol (SNMP) 107. A hierarchical decentralized naming system for computers, services, or other resources connected to the Internet or a private network; allows users to connect to websites with URLs instead of IP addresses: Domain Name System (DNS) 108. Enables users to securely log on to a remote server and issue commands interactively: Secure Shell (SSH) 109. Enables users to insecurely log on to a remove server and issue commands interactively: Telnet 110. The sender doesn't send any data to the destination node until the destination node acknowledges that its listening to the sender: Connection-Oriented Protocol 111. A query to the receiver asking "Hello are you there": SYN Packet 112. An acknowledgement sent back by the recipient: SYN-ACK 113. A method used in a TCP/IP network to create a connection between a local host/client and server. It is a three-step method that requires both the client and server to exchange SYN and ACK: Three-Way Handshake 114. An acknowledgement: ACK 115. Signifies the beginning of a session: SYN Flag 116. Acknowledges a connection and is sent by a host after receiving a SYN-ACK packet: ACK Flag 117. Used to deliver data directly to an application; data isn't buffered and sent immediately: PSH Flag Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 118. Used to signify urgent data: URG Flag 119. Resets or drops a connection: RST Flag 120. Signifies that the connection is finished: FIN Flag 121. A 32-bit number that tracks packets received by a node and allows reassembling large packets that have been broken up into smaller packets; allows a range of numbers from 0 to more than 4 billion: Initial Sequence Number (ISN) 122. An attack that relies on guessing the ISNs of TCP packets: Network Session Hijacking 123. The logical component of a TCP connection and can be assigned to a process that requires network connectivity: Port 124. The more services being run on a server the less ports are open for attack: False 125. Lists a series of well-known ports: Internet Assigned Numbers Authority (IANA) 126. Port for SMTP any attempted emails sent to a remove server from a workstation connects to this port: Port 25 127. Ports for FTP; the standard for moving or copy large files still used today; more secure than TFTP; requires a logon name and password: Ports 20 and 21 128. Port for DNS; if a server on your network uses DNS its using this port;: Port 53 129. Port for the Trivial File Transfer Protocol (TFTP); many network engineers use the service to transfer router and backup router configurations: Port 69 130. Port for HTTP; used when you connect to a web server: Port 80 131. Port used for Secure Hypertext Transfer Protocol (SHTTP); typically reserved for secure connections: Port 443 132. Port for Network News Transfer Protocol (NNTP); used to connect a news server for use with newsgroups: Port 119 133. Port for Remote Procedure Call (RPC); used by Microsoft RPC; critical for operation of Microsoft Exchange Server: Port 135 134. Port for NetBIOS; used to share resource: Port 139 Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 135. Port for Internet Message Access Protocol 4 (IMAP4) used to retrieve e-mail: Port 143 136. A fast but unreliable delivery protocol that operates on the Transport Layer; widely used for its speed; doesn't need to verify receiver listening; protocol is connectionless; compared to talking over a loudspeaker: User Datagram Protocol (UDP) 137. Used to send messages related to network operations; makes it possible for professionals to troubleshoot network connectivity problems with the PING command: Internet Control Message Protocol (ICMP) 138. First byte is reserved for the network address; can support 16 million hosts; has a three-octet host address; number is limited and reserved for large corporations and governments: Class A 139. Divided evenly between a two-octet network address and a two-octet host address; allows more than 65,000 hosts per network address; large organizations and ISPs are assigned these: Class B 140. Has a three octet-network address and a one-octet host address; resulting in more than 2 million addresses; each address supports up to 254 hosts; usually for small businesses and home use: Class C 141. What is 11000001 in Decimal?: 193 142. Network attacks are usually initiated for financial gain or sociopolitical reasons: True 143. Software such as a virus, worm or Trojan program introduced into a network to help an attack accomplish goals: Malware 144. A program that ATTACHES itself to a file or another program often sent via e-mail: Virus 145. There is a foolproof method of preventing viruses from attaching themselves to computers: False 146. Checks files for a set of specific bytes called a signature and sends out a warning if it finds something: Antivirus 147. A virus coded as a macro in programs that support a macro programming language; can delete important files, steal passwords and web history: Macro Virus 148. A program that replicates and propagates itself WITHOUT having to attach itself to a host; has the potential to infect every computer in the world over a short period: Worm Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 149. Disguise themselves as useful programs and can instal a backdoor or rootkit on a computer: Torgan Programs 150. Programs that give attackers a means of regaining access to the attacked computer later: Backdoors 151. Created after an attack and usually hides itself in the Operating System tools so it's almost impossible to detect: Rootkits 152. A program that sends information from the infected computer to the person who initiated the program; info could be financial data, passwords, PINs: Spyware 153. Main purpose is to determine's a user's purchasing habits so web browsers display advertisements tailored to the user: Adware 154. Allows only approved programs to run on a computer; all programs not included would be prevented from executing on the user's computer: Application Whitelisting 155. Any attempt by an unauthorized person to access, damage or use network resources or computer systems: Attack 156. A specially crafted string of data intended to take advantage of a vulnerability: Exploit 157. Concerned with the security of computers or devices that are part of a network infrastructure: Network Security 158. Defined as securing a stand-alone computer that's not part of a network infrastructure: Computer Security 159. Prevents legitimate users from accessing network resources: Denial-Of-Service Attack 160. Causes the victim computer to freeze and malfunction: Ping of Death 161. Launched against a host from multiple servers or workstations: Distributed Denial-Of-Service Attack 162. Computer users unaware their systems are sending malicious packets to other victims: Zombies 163. A network of "robot" computers following instructions from a central location or system: Botnet 164. An attacker finds a vulnerability in poorly written code that doesn't check for a defined amount of memory space use; program writes data over the 64-byte mark without triggering an error: Buffer Overflow Attack Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 165. Programmers are not adequately trained to write programs with computer security in mind: True 166. An attacker can listen in on unencrypted network communications in order to intercept confidential information or gather credentials that can be used to extend the attack; accomplished with sniffing tools designed to capture packets being sent across the network: Eavesdropping 167. Attackers inject themselves between two parties or systems communicating with one another in order to manipulate messages being passed back and forth: Man-In-The-Middle Attack 168. Hardware devices or software that can be used to capture keystrokes on a computer: Keyloggers 169. A device or software application that monitors a network or systems for malicious activity or policy violations: Intrusion Detection System 170. Protects against network and application-level attacks, securing organizations against intrusion attempts, malware,Trojans, DoS and DDoS attacks, malicious code transmission, backdoor activity and blended threats: Intrusion Prevention System 171. An executable piece of programming code that creates an interface to an operating system for issuing system commands and shouldn't appear in an email attachment: Shell 172. The process of finding information on a company's network: Footprinting 173. Legally obtaining corporate information through observation and web tools: Competitive Intelligence 174. An automated way to discover pages of a website by following links: Spidering 175. A 1-pixel x 1-pixel image file referenced in an tag and it usually works with a cookie: Web Bug 176. A text file generated by a web server and stored on a user's browser; the information in this file is sent back to the web server when the user returns to the website: Cookie 177. The transfer of all records or which the DNS server is responsible: Zone Transfer 178. Using knowledge of human nature to get information from people: Social Engineering Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 179. Someone who is skilled at reading what users enter on their keyboards especially logon names and passwords: Shoulder Surfing 180. Trailing closely behind an employee who has access to an area without the person realizing you didn't use a PIN or a security badge to enter: Piggybacking 181. When a message is framed as an urgent request to visit a website to make sure you're not locked out of an account: Phishing 182. An attack carried out by email that combines social engineering with exploiting vulnerabilities; directed at specific people in an organization: Spear Phishing 183. A method social engineers use to gain access to information; looking through other people's trash: Dumpster Diving 184. IPv6 addresses consist of 16 bytes and are written in hexadecimal notation: True 185. Numbering system that uses numbers from 0 to 63: Base64 186. The 4 bytes that typically make up IP addresses: Octets 187. TCP ports help to stop/disable unneeded services: True 188. • Network Address • Host Address: Components of an IP Address 189. To improve security, Windows 10, Windows 8, Windows Server 2016, and Windows Server 2012 have most services and features disabled by default: False 190. Windows Software Update Services (WSUS) is designed to manage patching and updating system software from the network.: True 191. The MSBA tool can quickly identify missing patches and misconfigurations.: True 192. Rootkits containing Trojan binary programs that are ready to install are more dangerous than typical Trojan programs.: True 193. Amount of code a computer system exposes to unauthenticated outsiders: Attack Surface 194. A Windows client/server technology introduced in 2005 used to manage patching and updating system software from the network: Windows Software Update Services Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 195. Microsoft's standard for managing Windows security patches on multiple computers in a network between 1994 and 2005: Systems Management Server 196. Used to share files and usually runs on top of NetBIOS, NetBEUI, or TCP/IP: Server Message Block 197. A fast and efficient protocol that requires little configuration and allows transmitting NetBIOS packets over TCP/IP: NetBEUI 198. An OS security mechanism that enforces access rules based on privileges for interactions between processes, files, and users: Mandatory Access Control 199. A standardized protocol that replaced SMB in Windows 2000 Server and later: Common Internet File System 200. In 2007 became Windows new standard to deploy and manage servers alongside updated patch-management functionality: System Center Configuration Manager 201. An interprocess communication mechanism that allows a program running on one host to run code on a remote host: Remote Procedure Call 202. An open-source implementation of CIFS: SAMBA 203. The original Microsoft file system, is supported by nearly all desktop and server OS from 1981 to now: File Allocation Table (FAT) 204. Allows a single file to be up to 4 GB and a disk volume to be up to 8 terabytes: FAT-32 205. First released as a high-end file system in Windows NT 3.1, and in Windows NT 3.51, it added support for larger files and disk volumes as well as ACL file security: New Technology File System (NTFS) 206. An excellent tool for determining whether a system is vulnerable due to an RPC-related issue and for many other configuration and patching items as well: Microsoft Baseline Security Analyzer (MBSA) 207. Software loaded into memory that enables a pro- gram to interact with a network resource or device; isn't a protocol: NetBIOS 208. Network resources are identified with 16-byte NetBIOS games: True 209. A fast, efficient protocol that requires little configuration and allows transmitting NetBIOS packets over TCP/IP and various network topologies: NetBEUI 13 / 17 Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 210. Systems running newer Windows OS can share files and resources without using NetBIOS: True 211. Intercept SMB traffic and collect usernames and pass- word hashes: L0phtcrack and SMBRelay 212. A folder on a disk is made available to users for sharing. A password can be configured for the share but isn't require: Share-Level Security 213. The resource is made available to network users; however, a user- name and password are required to access the resource: User-Level Security 214. used to authenticate user accounts: Domain Controllers 215. An anonymous connection established without credentials, such as a username and password: Null Sessions 216. Set the number of failed attempts before the account is disabled temporarily: Account Lockout Threshold 217. Set the period of time the user account is locked out after a specified number of failed logon attempts: Account Lockout Duration 218. Best way to protect a network from SMB attacks is to make sure perimeter routers and firewalls filter out ports 137 to 139 and 445: True 219. Any computer system that is not a general-purpose PC or server: Embedded System 220. Software residing on a chip: Firmware 221. A small program developed specifically for use with embedded systems: Embedded Operating System 222. Devices on an organization's network performing more than one function, such as printers, scanners, and copiers: Malfunction Devices 223. A cryptographic firmware boot-check processor installed on many new computer systems: Trusted Platform Module 224. An embedded OS certified to run multiple levels of classification on the same CPU without leakage between levels: MILS 225. An OS microkernel extension developed for Linux: RTLinux 226. A specialized embedded OS used in devices such as programmable thermostats, appliance controls, and even spacecraft: RTOS 227. An open-source embedded OS used in space systems because it supports processors designed specifically to operate in space: RTEMs Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 228. Systems used for equipment monitoring in large industries, such as public works and utilities, power generators and dams: SCADA 229. *Nix-based embedded OSs are often used for devices in which flexibility and a wide range of feature and hardware support is needed, such as GPSs, PDAs, and iPhones: True 230. The term "wireless" is generally used to describe equipment and technologies operating in the radio frequency (RF) spectrum between 3 Hz and 300 GHz: True 231. There are measures for preventing radio waves from leaving or entering a building so that wireless technology can be used only by people located in the facility: True 232. Transmit and receive wireless signals, and access points (APs), which are the bridge between wired and wireless networks: Wireless Network Interface Cards 233. A radio transceiver that connects to a network via an Ethernet cable and bridges a Wireless LAN network with a wired network: Access Point 234. It is possible to have a wireless network that doesn't connect to a wired network: True 235. Most companies that conduct security tests use a WLAN: True 236. The name used to identify a WLAN; configured on the AP as a unique, 1- to 32-character, case-sensitive alphanumeric name: SSID 237. If a company doesn't change its default SSID but decides to disable SSID broadcasts a determined intruder can use a passive wireless sniffer: True 238. Defines how data is placed on a carrier signal: Modulation 239. Data is spread across a large-frequency bandwidth instead of traveling across just one frequency band: Spread Spectrum 240. Was developed to create LAN and WAN standards: Project 802 241. Defined specifications for wireless connectivity as 1 Mbps and 2 Mbps in a LAN: 802.11 Standard 242. The bridge between wired and wireless networks: Routers 243. CSMA/CD is implemented at the data link layer on wireless networks: False 244. Data hops to other frequencies to avoid interference that might occur over a frequency band: FHSS Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 245. A technology that uses microwave radio band frequencies to transmit data: Narrowband 246. Data packets are spread simultaneously over multiple frequencies instead of hopping to other frequencies: DSSS 247. Technology is restricted to a single room or line of sight because this light spectrum cannot penetrate walls: Infared 248. A standard that addresses the issue of authentication: 802.1x 249. An enhancement to PPP, that was designed to allow a company to select its authentication method: EAP 250. An independent WLAN without an AP: Ad-Hoc Network 251. Records session-specific information about a network connection: Stateful Packet Filter 252. IDS systems that don't take any action to stop or prevent an activity: Passive Systems 253. Internal private IP addresses are mapped to public external IP addresses hiding the internal infrastructure: NAT 254. Small network containing resources that a company wants to make available to Internet users and helps maintain security: DMZ 255. Handle each packet separately and are not resistant to spoofing or DoS attacks: Stateless Packet Filter 256. Administrator can perform basic troubleshooting tests and list information stored on the router: User Mode 257. Administrator can perform full router configuration tasks: Privileged Mode 258. Indicates that a system or network has been hacked: Indicators of Compromise 259. IDS systems log events and send alerts, but they can also interoperate with routers and firewalls to stop an attack: Active Systems 260. Inspects network traffic at a higher level in the OSI model than a traditional stateful packet inspection: Application Aware Firewall 261. Break up the band into smaller frequency ranges: Channels 262. Rate at which a sound wave repeats: Frequency Cyber Exam 1, HS 235 Exam 2, HS 235 exam 4 Ch. 8,9,11,13 Study online at 263. Operates in the 2.4 GHz band and increased the throughput to 11 Mbps: 802.11b 264. Released in 2003, operates in the 2.4 GHz band, too; uses the OFDM method: 802.11g 265. Released in 2005, had improvements to address the problem of interference: 802.11e 266. The most common critical SQL vulnerability: "Null" Sa Password 267. 802.15 standard addresses networking devices in one person's workspace: WPAN 268. Contains a minimal version of IOS; used to boot router if flash memory gets corrupted: ROM 269. Take the additional step of performing some sort of action to prevent the intrusion, instead of just alerting administrators of the attack: Intrusion Prevention Systems 270. Can perform scans for wireless access points and can set up fake APs to social-engineer users or confuse attackers using airbaseng: Wi-Fi Pineapple 271. a wireless authentication standard created to allow users to easily add devices to a wireless network securely: WPS 272. Hardware or software and are used to control traffic entering and leaving a network or subnet: Firewall 273. A computer placed on the network perimeter that contains information or data intended to lure hackers and distract them from legitimate network resources: Honeypot 274. IEEE's main purpose is to create standards for LANs and WANs: True 275. A wireless user attempting access to a WLAN: Supplicant