Title: Review Quiz Module 2
Course: CET 2660 Network Security Fundamentals > Section: Module Two - Attacks, Assessments, and Mitigation

Q: XML is designed to carry data instead of indicating how to display it.
- true
- false
A: true

Q: A(n) ____ is a method for adding annotations to the text so that the additions can be distinguished from the text itself.
A: markup language
If wrong: Please refer to page 89 of the textbook

Q: A(n) ____ attack takes advantage of vulnerability in the Web application program or the Web server software so that a user can move from the root directory to other restricted directories.
A: directory traversal
If wrong: Please refer to page 90 of the textbook

Q: ____ are privileges that are granted to users to access hardware and software resources.
A: Access rights
If wrong: Please refer to page 104 of the textbook

Q: A(n) ____ occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer.
A: buffer overflow
If wrong: Please refer to page 96 of the textbook

Q: A(n) ____ attack uses the Internet Control Message Protocol (ICMP), which is a Network Layer protocol that is part of Transmission Control Protocol/Internet Protocol (TCP/IP) to flood a victim with packets.
A: ping flood
If wrong: Please refer to page 97 of the textbook

Q: Man-in-the-middle attacks cannot be conducted on networks.
- true
- false
A: false

Q: A honeynet typically contains one or more honeypots.
- true
- false
A: true

Q: Transitive access is an attack involving using a third party to gain access rights.
- true
- false
A: true

Q: ____ is a systematic and methodical evaluation of the exposure of assets to attackers, forces of nature, or any other entity that is potentially harmful.
A: Vulnerability assessment
If wrong: Please refer to page 125 of the textbook

Q: A(n) ____ is a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, yet they are actually imitations of real data files.
A: honeypot
If wrong: Please refer to page 139 of the textbook

Q: The purpose of ____ is to eliminate as many security risks as possible and make the system more secure.
A: hardening
If wrong: Please refer to page 144 of the textbook

Q: In a white box test, the tester has no prior knowledge of the network infrastructure that is being tested.
- true
- false
A: false

Q: A(n) ____ is an approach, philosophy, or strategy regarding security.
A: security posture
If wrong: Please refer to page 143 of the textbook

Q: A(n) ____ is the standard security checklist against which systems are evaluated for a security posture.
A: baseline