Cryptography Education Notes

Chapter 5 - Port Scanning 1. Closed ports respond to a NULL scan with what type of packet?: RST 2. If an attacker decides to implement a less obvious port-scan, or stealth attack, which of the following techniques would be appropriate to make their activities more difficult to detect?: Limit their scan speeds 3. In a Linux script, which of the lines is important because it identifies the file as a script?: #!/bin/sh 4. In a normal TCP session, the sender sends a packet to another computer with which of the following flags set?: SYN flag 5. In an ACK scan, if the attacked port returns an RST packet the attacked port is considered to be operating in what state?: Unfiltered 6. In any *NIX system, after saving a script named "script_name," you need to make it executable so that you can run it.Which command will accomplish this task from the command line?: chmod+x script_name 7. Nmap has a GUI front end that makes it easier to work with some of the complex options by providing a GUI. Which of the following is the Nmap GUI front end?: Zenmap 8. One of the limitations when using "ping sweeps" is that many network administrators configure nodes not to respond to ICMP Echo Requests.What type of ICMP Echo message is being disabled by these administrators?: Reply 9. Some attackers want to be hidden from network devices or IDSs that recognize an inordinate amount of pings or packets being sent to their networks. Which of the following attacks are more difficult to detect?: Stealth 10. To verify if all the IP addresses of a network are being used by computers that are up and running, you can use a port scanner to perform what procedure on a range of IP addresses?: Ping 11. What advanced port-scanning tool can allow a security tester to bypass filtering devices by injecting crafted or otherwise modified IP-packets into a network?: Hpping 12. What network security tool, usually included with Kali Linux, allows a user to ping multiple IP addresses?: Fping 13. What open source port-scanning tool is considered to be the standard port-scanning tool for security professionals?: NMAP 14. What open-source network utility allows you to use plug-ins to run test programs (scripts) that can be selected from the client interface?: OpenVAS 1/ 2 C Study online at 15. What type of port scan has the FIN, PSH, and URG flags set?: XMAS scan 16. What type of port scan is similar to a SYN scan and is risky to use because it relies on the attacked computer's OS?: Connect 17. When a TCP three-way handshake ends, both parties send what type of packet to end the connection?: FIN 18. When security professionals create a packet, they may choose to specifically set which of the following fields to help initiate a response from a target computer? Select one:: Flag 19. When using a port-scanner, what procedure can be conducted to identify which IP addresses belong to active hosts?: Ping Sweep 20. When using the text editor vim what command "Appends text after the insertion point"?: A 21. When writing a script which statement allows you to avoid creating an endless loop in your script?: While 22. Which of the following describes a flexible program that automates a task that takes too much time to perform manually?: Customized script 23. Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?: Script 24. Which statement is where the script performs its main task?: Do 25. Which vi command "deletes the current line"?: DD