Module 9: Practice Quiz

Question 1

Which property of secure communication ensures that people are who they say they are when communicating over the internet?

Answer 1

Authentication

This property is crucial for verifying identities in digital communications.

Question 2

Which property of secure communication ensures that a message is not modified before it reaches the receiver?

Answer 2

Integrity

Integrity protects the accuracy and consistency of data during transmission.

Question 3

Which property of secure communication is protected by encrypting the messages exchanged?

Answer 3

Confidentiality

Confidentiality ensures that information is accessible only to those authorized to have access.

Question 4

Attackers tend to keep the uptime of domains used for malicious purposes as short as possible in order to avoid being detected.

T/F

Answer 4

FALSE

Attackers may keep domains active longer to exploit them before detection.

Question 5

Round Robin DNS is a mechanism used by large websites to distribute the load of incoming requests to several servers at a single physical location.

T/F

Answer 5

TRUE

This method helps balance traffic and improve performance.

Question 6

DNS-based content delivery aims to distribute the load amongst multiple servers at a single location, but also distribute these servers across the world.

T/F

Answer 6

TRUE

This approach enhances responsiveness and availability for users globally.

Question 7

DNS-based content delivery determines the nearest server, which results in increased responsiveness and availability.

T/F

Answer 7

TRUE

Proximity to servers reduces latency and improves user experience.

Question 8

Legitimate networks may let malicious content be up for weeks to more than a year.

T/F

Answer 8

FALSE

Legitimate networks typically act quickly to remove malicious content.

Question 9

How does FIRE identify the most malicious networks?

Answer 9

Analyzing the information given by data sources and searching for ASes with a large percentage of malicious IP addresses.

This method focuses on identifying patterns of malicious activity.

Question 10

ASwatch uses information exclusively from the data plane to infer network reputation.

T/F

Answer 10

FALSE

ASwatch also considers control plane data for a comprehensive analysis.

Question 11

ASwatch relies on the premise that ‘bulletproof’ ASes have distinct interconnection patterns and overall different control plane behavior from most legitimate networks.

T/F

Answer 11

TRUE

This distinction helps in identifying potentially malicious networks.

Question 12

In order to stop a prefix or AS-Path announcement attack, we need access to the ——, such as IP prefixes and AS-paths.

Answer 12

Control Plane data

Control Plane data includes IP prefixes and AS-paths necessary for mitigation.

Question 13

In attacks where network traffic is dropped, manipulated or impersonated, the data accessed is located at the ——–.

Answer 13

Data Plane

The Data Plane is responsible for the actual transmission of data packets.

Question 14

Which attack disrupts the BGP characteristic to favor more specific prefixes?

Answer 14

Sub-prefix hijacking

This attack can lead to routing issues and traffic misdirection.

Question 15

ARTEMIS uses a configuration file and a mechanism for receiving BGP updates from routers and monitoring services to detect BGP hijacking attacks.

T/F

Answer 15

TRUE

This system enhances the detection of routing anomalies.

Question 16

A Distributed Denial of Service Attack consists of the attacker sending a large volume of traffic to the victim through servers (slaves), so that the victim host becomes unreachable or in exhaustion of its bandwidth.

T/F

Answer 16

TRUE

DDoS attacks aim to overwhelm the target’s resources.

Question 17

IP spoofing is the act of setting a false IP address in the source field of a packet with the purpose of impersonating a legitimate server.

T/F

Answer 17

False

Question 18

In a reflection attack, the attackers use a set of reflectors to initiate an attack on the victim.

T/F

Answer 18

TRUE

Reflectors amplify the attack traffic directed at the victim.

Question 19

During a Reflection and Amplification attack, the slaves set the source address of the packets to the ——–.

Answer 19

Victim’s IP address

This misdirection increases the attack’s effectiveness.

Question 20

What is the difference between a conventional DDoS and a Reflection and Amplification attack?

Answer 20

In a DDoS attack, the slaves send traffic directly to the victim as opposed to a reflector sending the traffic to the victim.

This distinction highlights the mechanics of each attack type.

Question 21

Which mitigation technique uses fine-grained filters across AS domain borders, and attributes such as length and fragment can be used to match traffic?

Answer 21

BGP Flowspec

BGP Flowspec allows for more precise traffic management.

Question 22

Which defense mechanism consists of a service that diverts the incoming traffic to a specialized server, where traffic is divided into either clean or unwanted traffic, and clean traffic is then sent to its original destination?

Answer 22

Traffic Scrubbing Services

This service enhances network security by filtering out malicious traffic.

Question 23

BGP Blackholing stops the traffic closer to the destination of the attack.

T/F

Answer 23

FALSE

BGP Blackholing is designed to stop traffic closer to the source of the attack.

Question 24

BGP Blackholing is used to mitigate DDoS attacks.

T/F

Answer 24

TRUE

This technique helps to prevent further damage during an attack.