2 cissp ® Official Study Guide Eighth Edition

Know the network reconnaissance techniques used by attackers preparing to attack a 
network.
Before launching an attack, attackers use IP sweeps to search out active hosts 
on a network. These hosts are then subjected to port scans and other vulnerability probes 
to locate weak spots that might be attacked in an attempt to compromise the network. You 
should understand these attacks to help protect your network against them, limiting the 
amount of information attackers may glean.
Written Lab
1.
What is the major difference between a virus and a worm?
2.
Explain how an attacker might construct a rainbow table.
3.
What are the actions an antivirus software package might take when it discovers an 
infected file?
4.
Explain how a data integrity assurance package like Tripwire provides some secondary 
virus detection capabilities.

---

Review Questions 
945
Review Questions
1.
What is the most commonly used technique to protect against virus attacks?
A.
Signature detection
B.
Heuristic detection
C.
Data integrity assurance
D.
Automated reconstruction
2.
You are the security administrator for an e-commerce company and are placing a new web 
server into production. What network zone should you use?
A.
Internet
B.
DMZ
C.
Intranet
D.
Sandbox
3.
Which one of the following types of attacks relies on the difference between the timing of 
two events?
A.
Smurf
B.
TOCTOU
C.
Land
D.
Fraggle
4.
Which one of the following techniques is most closely associated with APT attacks?