Chapter 12 – Internet and World Wide Web Security
TRUE/FALSE
1. The term Internet and World Wide Web are different terms that mean the same thing.
2. Computers on the Internet are identified primarily by their IP address.
3. SQL injection attacks are isolated to custom applications, so administrators can prevent them.
4. The objective of a phishing attack is to entice e-mail recipients to click a bogus link where personal
information can be stolen.
5. Windows Basic Authentication requires that users enter a username and password and the password is
transmitted using a hashing algorithm.
MULTIPLE CHOICE
1. Which of the following is true about the Internet?
a.
it is the same as the World Wide Web
c.
it was developed by a network of banks
and businesses
b.
it was established in the mid-1960s
d.
it was originally built on an extended star
topology
2. Which of the following is a highly secure public facility in which backbones have interconnected data
lines and routers that exchange routing and traffic data?
a.
ISP
c.
NAP
b.
POP
d.
NSF
3. What feature of the 13 DNS root servers enables any group of servers to act as a root server?
a.
multicast addressing
c.
anycast addressing
b.
broadcast addressing
d.
unicast addressing
4. What makes IP spoofing possible for computers on the Internet?
a.
network address translation
c.
the 32-bit address space
b.
the lack of authentication
d.
the DNS hierarchy
5. What type of attack exploits a lack of bounds checking on the size of data stored in an array?
a.
buffer overflow
c.
phishing
b.
SQL injection
d.
ActiveX control
6. What type of attack involves plaintext scripting that affects databases?
a.
phishing
c.
Java applet
b.
ActiveX control
d.
SQL injection
7. What type of attack displays false information masquerading as legitimate data?
a.
Java applet
c.
buffer overflow
b.
phishing
d.
SQL injection
8. Which of the following is NOT a step you should take to prevent attackers from exploiting SQL
security holes?
a.
limit table access
c.
use standard naming conventions
b.
use stored procedures
d.
place the database server in a DMZ
9. Which variation on phishing modifies the user’s host file to redirect traffic?
a.
spear phishing
c.
DNS phishing
b.
pharming
d.
hijacking
10. What type of DNS server is authoritative for a specific domain?
a.
primary
c.
read-only
b.
secondary
d.
initial
11. What is a zone transfer?
a.
the movement of e-mail from one domain
to another
c.
backing up an SQL data file
b.
updating a secondary DNS server
d.
copying host file data to another system
12. What type of DNS configuration prevents internal zone information from being stored on an Internet-
accessible server?
a.
read-only zone
c.
caching DNS zone
b.
anti-phishing DNS
d.
split-DNS architecture
13. Which of the following is a top-level digital certificate in the PKI chain?
a.
security-aware resolver
c.
DNSSEC resolver
b.
trust anchor
d.
RRSIG record
14. Which aspect of hardening a Windows Web server allows you to restrict access to the web server
based on IP address?
a.
authentication
c.
access control
b.
NTFS permissions
d.
data confidentiality
15. Which of the following is NOT a recommended security setting for Apache Web servers?
a.
harden the underlying OS
c.
use the default standard Web page error
messages
b.
create Web groups
d.
disable HTTP traces
COMPLETION
1. The Internet tier system starts with a backbone network connected via _____________________ to
regional Internet service providers.
2. ___________ direct network traffic to its destination on the Internet using tables and protocols.
3. _______________________ is a name-resolution service that translates domain names to IP addresses.
4. The lack of authentication for computers on the Internet make IP _____________ possible, which is a
change in the IP addresses in the headers of malicious packets.
5. DNS _____________ poisoning steers unsuspecting victims to a server of the attacker’s choice instead
of the intended Web site.
6. ____________ are networks of zombie computers that magnify the scope and intensity of an attack.
7. A critical buffer component is the function _________ and buffer overflows are usually aimed at this
component.
8. A _______________ applet is a small program sometimes used as embedded code in Web pages.
9. The goal of _____________ is to provide authentication of DNS data and ensure integrity of DNS
data.
10. The _______________ Web Server is the most widely used Web server application.
MATCHING
a.
anycast addressing
f.
security-aware resolver
b.
DNSSEC
g.
spear phishing
c.
network access points
h.
slit DNS architecture
d.
pharming
i.
split brain DNS architecture
e.
POP ISPs
j.
zone transfer
1. a variation of phishing that intercepts traffic to a legitimate Web site and
redirects it to a phony replica site
2. a network architecture that divides DNS services between two servers
3. a network addressing scheme that allows DNS services to be decentralized among a group of servers,
regardless of their location
4. a computing system that is compliant with DNSSEC and that attempts to resolve a fully qualified
domain name to an IP address
5. a protocol designed to improve DNS security by using cryptography to ensure DNS integrity and
authentication
6. the communication of a zone file from the primary DNS server to secondary
DNS servers for updating
7. ISP facilities that provide connectivity to the Internet for business, education, and home users
8. a network architecture that uses a single DNS domain with a DNS server on the organization’s DMZ
for Internet services and a DNS server on the internal network for service to internal hosts
9. a variation of phishing directed at specific users instead of using spam e-mail.
10. highly secure public facilities where commercial Internet backbones and ISPs exchange routing and
traffic data
SHORT ANSWER
1. What is the origin and structure of the Internet? Include some of the services it provides and the
protocols they use.
2. What is the Internet backbone? Describe how routers work with the Internet backbone.
3. What is the DNS hierarchical system? Include a discussion of root servers in your answer.
4. What routing protocol is usually used on the Internet? Why is the information used by the protocol
vulnerable to compromise?
5. What is a buffer overflow attack?
6. List three of the steps you should take to close potential holes against SQL injection attacks.
7. What are the characteristics of a corporate phishing e-mail? List three of them.
8. What are the four guidelines for employees to follow to prevent phishing attacks?
9. How can you harden a DNS server using the split DNS architecture?
10. How can you provide data confidentiality for your IIS Web server?