Security Analysis and Vulnerability Assessment
Practice Questions
Course Introduction
This course provides an in-depth exploration of security analysis and vulnerability assessment in modern information systems. Students will learn methodologies and tools for identifying, evaluating, and mitigating vulnerabilities within network infrastructures, applications, and operating systems. The course covers foundational concepts such as threat modeling, risk assessment, penetration testing, and security auditing. Hands-on labs and case studies enable students to apply vulnerability assessment techniques, analyze vulnerabilities using industry-standard tools, interpret assessment results, and recommend appropriate remediation strategies. Emphasis is placed on ethical considerations, compliance standards, and the integration of assessment practices within organizational security policies.
Recommended Textbook
Hands On Ethical Hacking and Network Defense 2nd Edition by
Available Study Resources on Quizplus
13 Chapters
673 Verified Questions
673 Flashcards
Source URL: https://quizplus.com/study-set/2085
Page 2
Michael T. Simpson
Chapter 1: Ethical Hacking Overview
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41510
Sample Questions
Q1) Some of the most infamous cases are hacks carried out by ____ students, such as the eBay hack of 1999.
A)graduate
B)high-school
C)college
D)engineering
Answer: C
Q2) copies code from knowledgeable programmers instead of creating the code himself/herself
Answer: F
Q3) In the ____ model, the company might print a network diagram showing all the company's routers, switches, firewalls, and intrusion detection systems (IDSs) or give the tester a floor plan detailing the location of computer systems and the OSs running on these systems.
A)black box
B)white box
C)red box
D)gray box
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Tcpip Concepts Review
Available Study Resources on Quizplus for this Chatper
57 Verified Questions
57 Flashcards
Source URL: https://quizplus.com/quiz/41511
Sample Questions
Q1) the primary protocol used to communicate over the World Wide Web
A)FTP
B)SMTP
C)SNMP
D)SSH
E)HTTP
F)IRC
G)URG
H)SYN
I)PSH
Answer: E
Q2) The IP in TCP/IP stands for ____________________.
Answer: Internet Protocol
Q3) TCP stands for ____.
A)Transfer Control Protocol
B)Transmission Control Protocol
C)Transfer Congestion Protocol
D)THE Control Protocol
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 3: Network and Computer Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41512
Sample Questions
Q1) Why is "attach" a key word when talking about viruses?
Answer: A virus does not stand on its own.It can't replicate itself or operate without the presence of a host program.A virus attaches itself to a host program,just as the flu attaches itself to a host organism.
Q2) ____ is a remote control program.
A)Slammer
B)BlackIce
C)Symantec pcAnywhere
D)Zone Alarm
Answer: C
Q3) Describe an example of a macro virus.
Answer: The most infamous macro virus is Melissa,which appeared in 1999.The virus was initiated after a user opened an infected document;the virus then sent an e-mail message to the first 50 entries it located in the infected computer's address book.
Q4) Computer crime is the fastest growing type of crime worldwide.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
Chapter 4: Footprinting and Social Engineering
Available Study Resources on Quizplus for this Chatper
51 Verified Questions
51 Flashcards
Source URL: https://quizplus.com/quiz/41513
Sample Questions
Q1) The ____ tool can generate a report that can show an attacker how a Web site is structured and lists Web pages that can be investigated for further information.
A)Netcat
B)Paros
C)Dig
D)Whois
Q2) Unable to match request
A)HTTP 400 Bad Request
B)HTTP 403 Forbidden
C)HTTP 404 Not Found
D)HTTP 405 Method Not Allowed
E)HTTP 408 Request Timeout
F)HTTP 500 Internal Server Error
G)HTTP 502 Bad Gateway
H)HTTP 503 Service Unavailable
I)HTTP 504 Gateway Timeout
Q3) How can a computer criminal use HTTP methods before running an exploit on a server?
Q4) What is "competitive intelligence"?
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Port Scanning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41514
Sample Questions
Q1) Why is port scanning considered legal by most security testers and hackers?
Q2) operates on ports 65301, 22, 5631, and 5632
A)Nmap
B)pcAnywhere
C)XMAS scan
D)connect scan
E)closed port
F)ACK scan
G)filtered port
H)open port
I)NULL scan
Q3) What makes the OpenVAS tool unique?
Q4) How does a SYN scan work?
Q5) Port scanning is a method of finding out which services a host computer offers.
A)True
B)False
Q6) A closed port responds to a SYN scan with an RST packet, so if no packet is received, the best guess is that the port is open.
A)True
B)False
Page 7
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Enumeration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41515
Sample Questions
Q1) Windows NT 3.51 uses the ____ file system.
A)FAT16
B)FAT32
C)NTFS
D)ext3
Q2) Windows 95 uses the ____ file system.
A)FAT16
B)FAT32
C)NTFS
D)ext3
Q3) more stable than its predecessor, with an improved file system (FAT32)
A)Windows 98
B)Windows 95
C)Windows Server 2003
D)Fedora Linux
E)Solaris
F)Windows XP Professional
G)Novell Open Enterprise Server
H)Windows 2000 Server/Professional
I)Windows NT 3.51 Server/Workstation
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Programming for Security Professionals
Available Study Resources on Quizplus for this Chatper
53 Verified Questions
53 Flashcards
Source URL: https://quizplus.com/quiz/41516
Sample Questions
Q1) C programs must contain a(n) ____________________ function, but you can also add your own functions to a C program.
Q2) If you want to know what the Perl print command does, you can use ____.
A)perl -h
B)perldoc -f print
C)perl -h print
D)man perl print
Q3) ____________________ language uses a combination of hexadecimal numbers and expressions, such as mov, add, and sub, making it easier for humans to write programs than in binary or machine language.
Q4) The HTML ____________________ tag formats text as a level 1 heading.
Q5) In Perl, comment lines begin with the ____ character(s).
A)%
B)//
C)#
D)$
Q6) Most programming languages do not have a way to conduct testing of a variable.
A)True
B)False
Q7) List and describe the variable types used in C.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Desktop and Server Os Vulnerabilities
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41517
Sample Questions
Q1) Why is NetBIOS still used sometimes?
Q2) For a Windows computer to be able to access a *nix resource, ____ must be enabled on both systems.
A)NetBIOS
B)SMB
C)CIFS
D)NetBEUI
Q3) HTTP is associated with this port
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank
Q4) What should a password policy include?
Q5) Why should you review logs regularly? How should you accomplish this task?
Q6) RPC stands for ________________________.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Embedded Operating Systems: The Hidden Threat
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41518
Sample Questions
Q1) Wind River produces an open-source Linux OS for embedded systems and an OS microkernel extension called ____.
A)RTEMS
B)QNX
C)VxWorks
D)RTLinux
Q2) A(n) ____ operating system can be a small program developed specifically for use with embedded systems, or it can be a stripped-down version of an OS commonly used on general-purpose computers.
A)multi-threaded
B)embedded
C)GUI
D)SMP
Q3) Both general-purpose and embedded OSs use drivers to interface with hardware devices.
A)True
B)False
Q4) Explain the BIOS-level rootkit, called SubVirt, developed by Microsoft and the University of Michigan.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Hacking Web Servers
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41519
Sample Questions
Q1) What is ColdFusion?
Q2) main role is passing data between a Web server and Web browser
A)WebGoat
B)HTML
C)CGI
D)Cgi Scanner v1.4
E)Apache
F)Wfetch
G)JScript
H)virtual directory
I)XSS
Q3) The ____ Search page is an excellent starting point when investigating VBScript vulnerabilities.
A)CVE Web site
B)CERT
C)Microsoft Security Bulletin
D)Macromedia security
Q4) What is ActiveX Data Objects (ADO)?
Q5) In Windows, IIS stands for ______________________________.
Q6) What is ODBC used for?
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Hacking Wireless Networks
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41520
Sample Questions
Q1) addresses the issue of wireless metropolitan area networks (MANs)
A)802.16
B)spread spectrum
C)802.11b
D)narrowband
E)802.20
F)infrared (IR)
G)802.1X
H)Bluetooth
I)HiperLAN2
Q2) What is the function of a WG of the IEEE?
Q3) What is a basic service set (BSS)?
Q4) The 802.11b standard introduced Wired Equivalent Privacy (WEP), which gave many users a false sense of security that data traversing the WLAN was protected.
A)True
B)False
Q5) The first wireless technology standard, ____________________, defined the specifications for wireless connectivity at 1 Mbps and 2 Mbps in a LAN.
Q6) What is wardriving?
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Cryptography
Available Study Resources on Quizplus for this Chatper
58 Verified Questions
58 Flashcards
Source URL: https://quizplus.com/quiz/41521
Sample Questions
Q1) What is a substitution cipher?
Q2) ____ refers to verifying the sender or receiver (or both) is who he or she claims to be.
A)Authentication
B)Nonrepudiation
C)Availability
D)Authorization
Q3) After DES was in service for many years, NIST decided that a new standard was in order: ____.
A)Advanced Encryption Standard (AES)
B)RC5
C)International Data Encryption Algorithm (IDEA)
D)Blowfish
Q4) In a chosen-ciphertext attack, the attacker needs access to the cryptosystem to perform the attack.
A)True
B)False
Q5) What is cryptanalysis?
Q6) What is RC5?
Q7) What is a digital signature?
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Network Protection Systems
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41522
Sample Questions
Q1) How do you know what mode a Cisco router is in?
Q2) What are the advantages and disadvantages of hardware and software firewalls?
Q3) ____ is an open-source network-based IDS.
A)NetRanger
B)Snort
C)Aladdin
D)Entercept
Q4) records session-specific information about a network connection
A)stateful packet filter
B)firewall
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)enable mode
H)ASA
I)privileged mode
Q5) What is a path-vector routing protocol?
Q6) ____________________ are hardware devices used on a network to send packets to different network segments.
Page 15
To view all questions and flashcards with answers, click on the resource link above.