After a year as a senior network administrator, you have been promoted to work in the security
department of a large global Tier One ISP. You are to spend one month in training on security
issues, concepts, and procedures. The third day in your new position, the ISP is hit with a DDoS
attack from over 100,000 computers on the Internet. While the department works to manage the
attack, you monitor the impact on the network. What is the impact to the ISP when hit with a DDoS
such as this?

You are monitoring the DNS traffic on your network to see what kind of zone transfer data is
currently being exchanged. You wish to monitor the incremental zone transfers. You run a packet
capture to gather network traffic for this project. Which kind of transfer traffic are you looking for?

During a routine security inspection of the clients in your network, you find a program called
cgiscan.c on one of the computers. You investigate the file, reading part of the contents. Using the
portion of the program shown below, identify the function of the program.
Temp[1] = “GET /cgi-bin/phf HTTP/1.0\n\n”;
Temp[2] = “GET /cgi-bin/Count.cgi HTTP/1.0\n\n”;
Temp[3] = “GET /cgi-bin/test-cgi HTTP/1.0\n\n”;
Temp[4] = “GET /cgi-bin/php.cgi HTTP/1.0\n\n”;
Temp[5] = “GET /cgi-bin/handler HTTP/1.0\n\n”;
Temp[6] = “GET /cgi-bin/webgais HTTP/1.0\n\n”;
Temp[7] = “GET /cgi-bin/websendmail HTTP/1.0\n\n”;

You work for a medium sized ISP and there have been several attacks of the DNS configuration
recently. You are particularly concerned with DNS Spoofing attacks. You have a few older
machines that define the storage of Resource Records (RR) based on the TTL of name mapping
information. If an attacker sends fake mapping information to the DNS Server, with a high TTL,
which type of DNS Spoofing is this?

When using the 3DES encryption ( C = EK1[DK2[EK1[P]]] ) , what is the function of P?

Public Key Cryptography systems use which two of the following keys?

When a computer requires an input value to begin the cryptographic process, what is this value
called?

Which of the following are asymmetric encryption algorithms?

If you wanted to use Public Key cryptography to encrypt data transmissions, which of the following
ciphers could you use?

If you had a cipher that used a unique key every time you encoded text, what would you be using?