Cybersecurity quiz 28 Created on January 12, 2022 By admin simple quiz – (choose the correct answer) 1 / 10 routing router is a machine connected to a network and is only used to browse the devices connected to that network on the internet router is a machine connected to different networks at the same time and is capable of forwarding IP datagrams from one network to another modem is a machine connected to different networks at the same time and is capable of forwarding IP datagrams from one network to another 2 / 10 routing the routing table is used to connect "Alexa" with the home wifi routing tables should never be updated the routing table is used to route packets from one network to another 3 / 10 routing router has the interfaces router has no interfaces the routing tables do not contain information about the interfaces 4 / 10 TCP and UDP TCP stands for Transmission Control Protocol TCP stands for Total Control Protocol TCP stands for Telematic Control Protocol 5 / 10 TCP and UDP UDP stands for User Data Protocol UDP stands for Ultimate Data Protocol UDP stands for User Datagram Protocol 6 / 10 TCP and UDP TCP is connectionless UDP is connectionless UDP is connection-oriented 7 / 10 TCP and UDP TCP is faster than UDP UDP is faster than TCP TCP and UDP are equally fast 8 / 10 HTTP during an HTTP connection the server sends requests and the client replies with response messages HTTP (Hypertext Transfer Protocol) is not used under mobile applications HTTP (Hypertext Transfer Protocol) is the client-server protocol used to transfer web pages 9 / 10 HTTP in an HTTP request the "User-Agent" field indicates which server side program is making the request in an HTTP request the "User-Agent" field indicates which client side program is making the response in an HTTP request the "User-Agent" field indicates which client side program is making the request 10 / 10 HTTP HTTPS is the "secure" version of HTTP and runs HTTP over SSL/TLS (SSL/TLS is a cryptographic protocol) HTTPS protects against web application vulnerabilities HTTPS does not protect against application-level sniffing attacks Your score isThe average score is 88% LinkedIn Facebook VKontakte 0% Restart quiz 14 Created on January 12, 2022 By admin BASE CYBERSECURITY AND PENETRATION TEST QUIZ – (CHOOSE THE CORRECT ANSWER) 1 / 10 NMAP nmap tool is useful for capturing IP packets nmap is a password recovery tool nmap is used to scan and map the network 2 / 10 NMAP nmap -sU option is for TCP scan nmap -sn option is for a "ping" scan nmap -sT option is for "stealth" scan 3 / 10 NMAP to do an ACK scan with nmap use the -sA option with nmap it is not possible to specify individual ports to scan nmap can't do OS detection 4 / 10 NESSUS NESSUS is a secure browser NESSUS is a vulnerability scanner NESSUS is an antivirus 5 / 10 NESSUS the NESSUS client configures the scans and the NESSUS server runs them NESSUS does not have a vulnerability database NESSUS does not have a free version 6 / 10 SQL Injection Structured Query Language (SQL) it is used as a firewall it is not possible to do a SQL Injection using any HTTP Header "#" or "–" are methods for writing comments on SQL commands 7 / 10 SQL Injection "sqlmap" is a tool that detects any SQL Injection attacks in real time "sqlmap" is an important penetration test tool which is used to exploit any vulnerabilities related to SQL Injection sqlmap "-p" option is useful for specify the port to test 8 / 10 SQL Injection "- – method POST" is a SQL command "- – method POST" is a sqlmap option "- – method POST" is an HTTP VERB 9 / 10 XSS reflected XSS is when the malicious payload is sent to the server exclusively via the POST method XSS never creates an alert XSS and Cross Site Scripting are the same thing 10 / 10 XSS persistent XSS is when the malicious payload is sent to the vulnerable site and then saved it is not possible to steal cookies with an XSS attack filtering user input does not fix the XSS vulnerability Your score isThe average score is 80% LinkedIn Facebook VKontakte 0% Restart quiz 13 Created on January 12, 2022 By admin MEDIUM CYBERSECURITY AND PENETRATION TEST QUIZ – (CHOOSE THE CORRECT ANSWER) 1 / 10 METASPLOIT "set LHOST 10.98.25.6" is a command for setting victim IP address to Metasploit module "set RHOST 10.98.25.6" is a command for setting victim IP address to Metasploit module "set RHOST 10.98.25.6" is a command for setting attacker IP address to Metasploit module 2 / 10 METASPLOIT "exploit/multi/handler" is a Metasploit module useful to also act as a listener to receive a connection from the victim via a malicious payload auxiliary Metasploit modules are the same as the exploitation Metasploit modules "exploit/multi/handler" is an auxiliary Metasploit module 3 / 10 METERPRETER meterpreter "migrate" command is always required Meterpreter is a Metasploit auxiliary module "post/windows/gather/enum_services" is a pillaging ruby script for Meterpreter 4 / 10 METERPRETER Meterpreter runs only in Windows OS victims Meterpreter "enum_chrome" script is useful to gather credentials stored in Google Chrome Meterpreter does not allow privilege escalation 5 / 10 PIVOTING "socks4a" is a auxiliary Metasploit module which, together with the "proxychains" command, allows you to use the victim machine already exploited as an intermediary to execute commands on other machines connected on other networks otherwise not reachable by our machine "socks4a" isn't a proxy server socks4a's default port is 1000 6 / 10 PIVOTING pivoting cannot be done via SSH tunneling with "post/multi/manage/autoroute" Metasploit module you can avoid using socks4a the port set on the "socks4a" module must be the same as the one set on the "/etc/proxychains.conf" file 7 / 10 PIVOTING proxychains command is only for UNIX like OS "proxychains" goes before the command you want to execute on the victim machine proxychains cannot go through TOR proxy 8 / 10 BUFFER OVERFLOW "printf" C++ instruction is not vulnerable to BOF (Buffer Overflow) IDA is a software used to compile files "strcpy" C++ instruction is vulnerale to BOF (Buffer Overflow) 9 / 10 BUFFER OVERFLOW "objdump" does not disassemble executable files "!mona" tool doesn't work under Immunity Debugger EIP points to the next instruction 10 / 10 BUFFER OVERFLOW EMET helps prevent vulnerabilities using technologies such as DEP, ASLR, SEHOP ASLR prevent Buffer Overflow blocking an application from executing code in a non-executable area of memory "Stack Canary" prevent Buffer Overflow introducing random addresses for executables, libraries, and stacks making more difficult predict memory addresses Your score isThe average score is 66% LinkedIn Facebook VKontakte 0% Restart quiz 7 Created on January 13, 2022 By admin ARE YOU VULNERABLE? 1 / 10 ANTIVIRUS i have an antivirus but I disabled it because it slows down my PC i don't have any antivirus I have an antivirus that is always on I have an antivirus that is always on and I set it up to run a full scan at least once a week 2 / 10 if I receive an email from my bank with a link on which I have to enter my credentials I will follow the instructions in this email to the letter I ignoring it and delete the email I reply to the email for more information I'm good enough to rewrite to a sender by sending him my malicious link containing a nice backdoor :-)) 3 / 10 What do you use for remote connection with your PC? I remotely connect to my PC using software that does not encrypt data… I think the password is enough to protect access I use software that encrypts data but I use an easy password I use OPENVPN or SSH with a strong password 4 / 10 An SMS arrives on your smartphone saying that the package has been delayed in delivery and that for more information you need to click on a link. What are you doing? I click on the link because it is not possible to hack a smartphone I look on the internet for some discussion of people who have had the same problem as me to understand if the SMS is fake I check the e-commerce site from which I placed the order to understand if the delay in the delivery of the package is true and then I decide whether to click on the link proposed by the SMS or not I check the e-commerce site from which I placed the order to understand if it is true of the delay in the delivery of the package but in any case I will never click the link proposed by the SMS. Then I delete the SMS 5 / 10 I notice that a site I want to register on is HTTP (not HTTPS). What I do? I don't care and I still register using my email and the same password I use for other important things I sign up using a password that is different from all the others I use for other things but I still communicate all my personal data if I really want to register because I am interested in this site as credentials I use a new e-mail that does not contain my real name, I use a password that I have never used before and that I will never use again in the future and I do not communicate my real personal data 6 / 10 If I am connected to the free public wi-fi of a hotel and I must necessarily connect to a site with my credentials, what would I do? Before logging into the site I would connect to a server of a serious VPN service, then, once disconnected from the free public wi-fi, for security reasons I would change the site login password I would log in to the site anyway then, once disconnected from the free public wi-fi, I would change the site login password Nothing can happen, the free wi-fi belongs to a serious hotel 7 / 10 Where do I save my many passwords in case I forget them? I don't need to save them because I have few passwords and I always reuse those I save my passwords on the internal hard disk of the pc and/or on a removable external hard disk I write my passwords on a paper that I keep in my wallet I save everything on a serious password manager service 8 / 10 Do you save your home banking login credentials on your browser? Yes, because my browser is safe. I always update it Yes, because without the device PIN and the SMS code on my smartphone it is not possible to operate with the bank For the avoidance of doubt, and to prevent any malicious person from seeing my data anyway, I never save the important credentials on my browser 9 / 10 Do you ever update your OS? No because it is useless. I have antivirus Yes, often. It is very important to avoid cyber attacks using known vulnerabilities Yes, but not often, because the latest update could make things even worse 10 / 10 When you are away from your PC for a while but you don’t turn it off, does the screen saver turn on unlockable only with the password? No because nobody cares about my data No, I don't set any passwords (not even when Windows starts) so I shut down the PC every time Yes and with a strong password (no dates of birth, names, etc …) – uppercase and lowercase letters, numbers, special symbols and at least 8 characters in length Your score isThe average score is 91% LinkedIn Facebook VKontakte 0% Restart quiz