CIW v5 Security Essentials: 1D0-571

Which of the following is considered to be the most secure default firewall policy, yet usually causes the most work from an administrative perspective?

A. Configuring the firewall to respond automatically to threats

B. Blocking all access by default, then allowing only necessary connections

C. Configuring the firewall to coordinate with the intrusion-detection system

D. Allowing all access by default, then blocking only suspect network connections

Which of the following is a typical target of a trojan on a Linux system?

A. Kernel modules

B. Shared libraries

C. Boot sector files

D. System32 DLL files

A disgruntled employee has discovered that the company Web server is not protected against a particular buffer overflow vulnerability. The disgruntled employee has created an application to take advantage of this vulnerability and secretly obtain sensitive data from the Web server's hard disk. This application sends a set of packets to the Web server that causes it to present an unauthenticated terminal with root privileges. What is the name for this particular type of attack?

A. Man-in-the-middle attack

B. Trojan

C. Denial of service

D. Zero-day attack