Friday, May 24th

Information Security Assessment


Which of the following is the best example of a strong password?
What should you do if you receive a call from someone in your computer support department asking for your password?
Authentication is the process of determining the user's identity. In private and public computer networks, authentication is commonly done through the use of login IDs and passwords. Digest authentication is one of the authentication mechanisms.
Following is true about Digest authentication
Which of the following is NOT a sound strategy when formulating IT organizational objectives and considerations?
Physical security describes measures that prevent or deter attackers from accessing a facility, resource, or information stored on physical media. Mantrap is one such security measure that helps in deterring the threats related to physical security.
Mantrap:
Firewall is a set of related programs, located at a network gateway server that protects the resources of a private network from users from other networks. A firewall examines all traffic routed between the two networks to see if it meets certain criteria.
Packet filter is one of the categories of firewall.
Packet filtering firewall:
May 16 22:46:08 victim-host inetd[600]: /usr/lib/fs/cachefs/cachefsd: Segmentation Fault - core dumped
May 16 22:46:21 victim-host last message repeated 7 times
May 16 22:46:22 victim-host inetd[600]: /usr/lib/fs/cachefs/cachefsd: Bus Error - core dumped
May 16 22:46:24 victim-host inetd[600]: /usr/lib/fs/cachefs/cachefsd: Segmentation Fault - core dumped
May 16 22:46:56 victim-host inetd[600]: /usr/lib/fs/cachefs/cachefsd: Bus Error - core dumped
May 16 22:46:59 victim-host last message repeated 1 time
May 16 22:47:02 victim-host inetd[600]: /usr/lib/fs/cachefs/cachefsd: Segmentation Fault - core dumped
May 16 22:47:07 victim-host last message repeated 3 times
May 16 22:47:09 victim-host inetd[600]: /usr/lib/fs/cachefs/cachefsd: Hangup
May 16 22:47:11 victim-host inetd[600]: /usr/lib/fs/cachefs/cachefsd: Segmentation Fault - core dumped

Identify the Operating System used by the victim-host:

Following your company's security standards and policies is even more important when you're working away from the office.

Which of the following represent good telephone security practices? (Choose 3 answers)

The first wireless standard was 802.11. The following is true about the 802.11a standard:
Which of the following statements is NOT true regarding the current state of security threats on wireless devices?
An attack is defined as an assault on system security that derives from an intelligent threat. An attack is any action that violates security.
Protocol Exploit attack falls under which category of attacks?
Vulnerability scanning is the automated process of proactively identifying vulnerabilities of computing systems present in a network. Which of the below given tools are used for vulnerability scanning:
Reflected DoS attacks exploit the TCP three-way handshake vulnerability. The attacking machines send out huge volumes of SYN packets but with the IP source address pointing to the target machine. One of the countermeasures to prevent reflected DoS attack is to block ___________
Trojans are basically malicious, security-breaking programs, which cause considerable damage to both the hardware and software contents of a system. W32.Ranky.FW is a new Trojan discovered in the wild. To which class of Trojan does it belong to?
In an attempt to protect cookies, site developers often encode the cookies. Easily reversible encoding methods such as Base64 and ROT13 (rotating the letters of the alphabet 13 characters) give many a false sense of security regarding the use of cookies. The following is true about Cookie Snooping:
__________ in a DNS record indicates authority for the domain
________ is an 802.11b protocol analyzer/sniffer written in Java
The user is at high risk while receiving files via instant messengers, no matter who it's from or where it's from. Since there is no file checking utility bundled with the instant messengers, there is always a risk of infection by a Trojan. Identify the Trojan which disguises as MSN Messenger:
A denial of service attack (DoS) is an attack through which a person can render a system unusable, or significantly slow it down for legitimate users, by overloading its resources.
Which of the following tool is a DoS exploit that can be run against Windows 2000 machines.
Following are the protocols that are susceptible to sniffing.
Select the correct one. You can choose more than one option.