SEC+

Whats the difference between Vulnerability scanning and Penetration testing?

____ Makes itself difficult to detect or analyze
Contains protective code

What are 4 types of virus?

___inserts malware into a system which sets off an action.

____has the ability to hide spyware blockers, anti-virus program, and system utitlities.
Runs at root level or admin access

___self reproduces without a host application

___ is a program that is disguised as another program and performs its malicious activity in the background.

___can be spread via malware, such as a trojan horse.  Allows access to a computer (i.e. server, workstation, network device)

___Frequently refers to any software which displays advertisements
Some are spyware or malware

___that works on collecting information about the system and what it is used for.

Which of the following types of malware is the MOST difficult to reverse engineer?
A. Logic Bomb
B. Trojan
C. Armored Virus
D. Ransomware

___Software that takes control of a system and demands payment to a third party

_____ prevents access to resources by users authorized to use those resources.

What are the most common DOS attacks?

___Amplifies a DoS by using multiple computers to conduct an attack against a single entity (Smurf Attack)

____A computer compromised by a hacker that is used to perform malicious task under remote direction

_A network of compromised systems containing malware which acts as a robot.

Impersonating someone/something else by falsifying data

What types of forms does spoofing occur?

Attackers use a strategy to identify a site that is visited by those they are targeting.

____Vulnerability where an attacker can add comments/code to web pages which allows code injection

INSERT INTO message <Script> in here </script>

____Involves unauthorized commands coming from a trusted user to the website

Think Instant messaging

____Code injected into a database via a web form.

( is considered a breakout

What is the most common SQL attack

_____is a specific form of attack that can be employed to compromise Web sites that construct LDAP statements form data provided by users
(admin)(1(password)=*)

____Attack technique used to manipulate or compromise the logic of an XML application or service

____Strings of characters that keep your sessions information

(HTML)
(body on load = document.  ('badform')
shopppingsite.company

What are the types of tools used for newtork mapping?

___Software utility that allows direct testing of a user's logon password strength

Examples of Vulnerability Scanner