- Study guides, Class notes & Summaries

CS6262 Certification Exam Questions and CORRECT Answers A bug is different from a vulnerability in that a bug can be exploited and a vulnerability cannot - Ans False Which of the following are memory corruption vulnerabilities? - Ans Stack Overflow Use after Free

CS6262 Final Study Set | Questions and answers | Updated 2024/25

DOS attack classification- Hitlist Scanning - Answer-A portion of a list of targets is supplied to a compromised computer DOS attack classification - Permutation Scanning - Answer-All compromised computers share a common pseudo-random permutation of the IP address space. DOS attack classification - Signpost Scanning - Answer-Uses the communication patterns of the compromised computer to find new target. DOS attack classification- Random Scanning - Answer-Each compromised computer pr...

T/F: An amplification attack occurs when an attacker sends a small number of packets to elicit a much larger response from a server or service, overwhelming the intended target. - Answer-true T/F: TCP has the necessary safeguards in place to prevent network DoS - Answer-false Which of the following actors are part of the cyber crime underground economy? - exploit developers - botnet masters - spammers - all of the above - Answer-all of the above Which of the following is/are NOT a p...

T/F: An attacker that uses large botnet to make requests to a server to flood is an example of amplification attack. - Answer-True T/F: Unlike UDP, TCP has the necessary safeguards in place to prevent network DoS. - Answer-False Which of the following actors are part of the cyber crime underground economy? Exploit Developers Botnet Masters Spammers All of the above - Answer-All of the above Which of the following is/are NOT a potential network DoS mitigation? Select multiple. C...

Random Scanning - Answer-Each comprised computer probes random addresses Permutation Scanning - Answer-All comprised computers share a common psuedo-random permutation of the IP address space Signpost Scanning - Answer-Uses the communication patterns of the comprised computer to find a new target Hit List Scanning - Answer-A portion of a list of targets is supplied to a comprised computer Subnet Spoofing - Answer-Generate random addresses within a given address space Random Sppofi...

CS6262 Final Exam Solved Correctly!!

T/F: An attacker that uses large botnet to make requests to a server to flood is an example of amplification attack. True T/F: Unlike UDP, TCP has the necessary safeguards in place to prevent network DoS. False Which of the following actors are part of the cyber crime underground economy? Exploit Developers Botnet Masters Spammers All of the above All of the above

Random ScanningEach comprised computer probes random addresses Permutation ScanningAll comprised computers share a common psuedo-random permutation of the IP address space Signpost ScanningUses the communication patterns of the comprised computer to find a new target Hit List ScanningA portion of a list of targets is supplied to a comprised computer Subnet SpoofingGenerate random addresses within a given address space Random SppofingGenerate 32-bit numbers and stamp packets with them F...

A bug is different from a vulnerability in that a bug can be exploited and a vulnerability cannot False Which of the following are memory corruption vulnerabilities? Stack Overflow Use after Free What is the difference between a vulnerability and a control flow hijack The hijack is a way you can exploit a vulnerability A __________ attack is a type of ____________. The ROP is used because the code many not contain many useful gadgets 1. ROP 2. Return to Libc