IC3-3 Exam Questions and Answers | Exam-Dumps (Page: 3)

QUESTION: 11

In which of the following DoS attacks does an attacker send an ICMP packet larger than 65,536 bytes to the target system?

Ping of death
Fraggle
Jolt
Teardrop

Answer(s): A

Explanation:

In the ping of death attack, the attacker sends an ICMP packet larger than 65,536 bytes. Since the operating system does not know how to handle a packet larger than 65,536 bytes, it either freezes or crashes at the time of reassembling the packet. Now-a-days, operating systems discard such packets, so the ping of death attack is not applicable at the present time.
Answer option C is incorrect. In the jolt DoS attack, an attacker fragments the ICMP packet in such a manner that the target computer cannot reassemble it. In this situation, the CPU utilization of the target system becomes 100 percent and the target system gets crashed.
Answer option D is incorrect. In a teardrop attack, a series of data packets are sent to the target system with overlapping offset field values. As a result, the target system is unable to reassemble these packets and is forced to crash, hang, or reboot.
Answer option B is incorrect. In a fraggle DoS attack, an attacker sends a large amount of UDP echo request traffic to the IP broadcast addresses. These UDP requests have a spoofed source address of the intended victim. If the routing device delivering traffic to those broadcast addresses delivers the IP broadcast to all the hosts, most of the IP addresses send an ECHO reply message. However, on a multi-access broadcast network, hundreds of computers might reply to each packet when the target network is overwhelmed by all the messages sent simultaneously. Due to this, the network becomes unable to provide services to all the messages and crashes.

Reveal Solution Next Question

QUESTION: 12

Which of the following provides security for network traffic (transmitted packets) at the Network or Internet layer?

IP
UDP
TCP
IPSec

Answer(s): D

Explanation:

Internet Protocol Security (IPSec) is a method of securing data. It secures traffic by using encryption and digital signing. It enhances the security of data as if an IPSec packet is captured. Its contents cannot be read. IPSec also provides sender verification that ensures the certainty of the datagram's origin to the receiver.
Answer option A is incorrect. The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched inter-network using the Internet Protocol Suite, also referred to as TCP/IP.IP is the primary protocol in the Internet Layer of the Internet Protocol Suite and has the task of delivering distinguished protocol datagrams (packets) from the source host to the destination host solely based on their addresses. For this purpose, the Internet Protocol defines addressing methods and structures for datagram encapsulation. The first major version of addressing structure, now referred to as Internet Protocol Version 4 (IPv4), is still the dominant protocol of the Internet, although the successor, Internet Protocol Version 6 (IPv6), is being deployed actively worldwide.
Answer option B is incorrect. User Datagram Protocol (UDP) is one of the core members of the Internet Protocol Suite, the set of network protocols used for the Internet. With UDP, computer applications can send messages, in this case referred to as datagrams, to other hosts on an Internet Protocol (IP) network without requiring prior communications to set up special transmission channels or data paths. UDP is sometimes called the Universal Datagram Protocol.
Answer option C is incorrect. Transmission Control Protocol (TCP) is a reliable, connection-oriented protocol operating at the transport layer of the OSI model. It provides a reliable packet delivery service encapsulated within the Internet Protocol (IP). TCP guarantees the delivery of packets, ensures proper sequencing of data, and provides a checksum feature that validates both the packet header and its data for accuracy. If the network corrupts or loses a TCP packet during transmission, TCP is responsible for retransmitting the faulty packet. It can transmit large amounts of data. Application layer protocols, such as HTTP and FTP, utilize the services of TCP to transfer files between clients and servers.

Reveal Solution Next Question

QUESTION: 13

You work as a Network Security Administrator for NetPerfect Inc. The company has a Windows- based network. You are incharge of the data and network security of the company.
While performing a threat log analysis, you observe that one of the database administrators is pilfering confidential data.
What type of threat is this?

Malware
External threat
Internal threat
Zombie

Answer(s): C

Explanation:

This type of threat is known as internal threat. The difference between internal and external threats is as follows:Internal Threat: Internal threats originate from within an organization. These threats come from the employees and others having legal access. For example, a database administrator who has full access rights can easily steal the data. External Threat: External threats originate from outside an organization. These are the threats intended to flood a network with large volumes of access requests. These threats can be countered by implementing security controls on the perimeters of the network, such as firewalls, which limit user access to the Internet.
Answer option B is incorrect. External threats originate from outside of an organization, not from within the organization.
Answer option D is incorrect.
A zombie is malicious software that secretly takes over another computer connected to the Internet. The zombie's creator uses the same computer to launch attacks that are difficult to detect.Zombies are used in denial-of-service attacks. The attacker plants a zombie in hundreds of computers belonging to unsuspecting third parties, and then uses these computers against targeted websites. These computers are also called zombie computers. Zombies are also used to commit click fraud against sites displaying pay per click advertising. Others can host phishing or money mule recruiting websites.
Answer option A is incorrect. Malware is a combination of the terms malicious and software. It refers to a variety of hostile programs, such as a virus or a Trojan horse, designed to damage or disrupt a computer. It gathers information about a computer without the user's permission or knowledge.

Reveal Solution Next Question

QUESTION: 14

Which of the following Web sites is used by the users to browse various products and to make purchases?

Micro-site
Internet forum
Social networking site
E-commerce site

Answer(s): D

Explanation:

Electronic commerce, commonly known as e-commerce or eCommerce, or e-business consists of the buying and selling of products or services over electronic systems such as the Internet and other computer networks. The amount of trade conducted electronically has grown extraordinarily with widespread Internet usage. E-commerce sites can be used by users to browse various products and to make purchases. Amazon.com is an example of an e-commerce site.
Answer option A is incorrect.
A micro-site, also known as a mini site or weblet, is an Internet web design term referring to an individual web page or cluster of pages which are meant to function as an auxiliary supplement to a primary website. The micro-site's main landing page most likely has its own domain name or sub- domain. They are typically used to add a specialized group of information either editorial or commercial. Such sites may be linked in to a main site or not or taken completely off a site's server when the site is used for a temporary purpose. The main distinction of a micro-site versus its parent site is its purpose and specific cohesiveness as compared to the micro-site's broader overall parent website.Micro-sites used for editorial purposes may be a page or group of pages that, for example, may contain information about a holiday, an event or similar item which gives more detailed information than a site's general content area may provide.
A community organization may have its main site with all of the organization's basic information, but creates a separate, temporary micro- site to inform about a particular activity, event, or similar.
Answer option B is incorrect. An Internet forum, or message board, is an online discussion site. It originated as the modern equivalent of a traditional bulletin board, and a technological evolution of the dialup bulletin board system. From a technological standpoint, forums or boards are web applications managing user-generated content. People participating in an Internet forum may cultivate social bonds and interest groups for a topic made from the discussions.
Answer option C is incorrect. Social networking Web sites provide a virtual community in which people with a shared interest may communicate. These sites provide users the ability to create their profile page. The users can post their thoughts, ideas, and anything else and can share it with their friends. Some popular social networking sites are MySpace, Twitter, and Facebook.

Reveal Solution Next Question