You have been called to investigate a sudden increase in network traffic at XYZ. It seems that the
traffic generated was too heavy that normal business functions could no longer be rendered to
external employees and clients. After a quick investigation, you find that the computer has

services running attached to TFN2k and Trinoo software. What do you think was the most likely
cause behind this sudden increase in traffic?

Henry is an attacker and wants to gain control of a system and use it to flood a target system with
requests, so as to prevent legitimate users from gaining access. What type of attack is Henry
using?

Eve decides to get her hands dirty and tries out a Denial of Service attack that is relatively new to
her. This time she envisages using a different kind of method to attack Brownies Inc. Eve tries to
forge the packets and uses the broadcast address. She launches an attack similar to that of

fraggle. What is the technique that Eve used in the case above?

Peter is a Network Admin. He is concerned that his network is vulnerable to a smurf attack. What
should Peter do to prevent a smurf attack?
Select the best answer.

John is using tokens for the purpose of strong authentication. He is not confident that his security
is considerably strong.
In the context of Session hijacking why would you consider this as a false sense of security?

What is the key advantage of Session Hijacking?

What type of cookies can be generated while visiting different web sites on the Internet?

Which is the right sequence of packets sent during the initial TCP three way handshake?

What is Hunt used for?

You want to carry out session hijacking on a remote server. The server and the client are
communicating via TCP after a successful TCP three way handshake. The server has just
received packet #120 from the client. The client has a receive window of 200 and the server has a
receive window of 250.
Within what range of sequence numbers should a packet, sent by the client fall in order to be
accepted by the server?