1. How can you avoid ARP
poisoning?
ARP poisoning is a type of network attack that
can be resolved through these techniques:
Using Packet filtering: Packet filters can
filter out & block packets with clashing source address data.
Keeping away from trust relationship:
Organizations ought to develop a protocol that depends on trust relationship as
little as they can.
Utilize ARP spoofing software: Some programs
assess and certify information before it is transmitted and blocks any
information that is spoofed.
2.
What can an ethical hacker do?
An ethical hacker is a computer system and
networking master who systematically endeavours to infiltrate a PC framework or
network for the benefit of its owners to find security vulnerabilities that a
malicious hacker could potentially exploit.
3.
Why is Python utilized for hacking?
Most broadly utilized scripting language for
Hackers is Python. Python has some very critical highlights that make it
especially valuable for hacking, most importantly, it has some pre-assembled
libraries that give some intense functionality.
4.
What is Pharming and Defacement?
Pharming : In this strategy the attacker
compromises the DNS (Domain Name System) servers or on the user PC with the
goal that traffic is directed towards malicious site
Defacement : In this strategy the attacker
replaces the firm’s site with an alternate page. It contains the hacker’s name,
images and may even incorporate messages and background music.
5.
What is Cowpatty?
Cowpattyis implemented on an offline
dictionary attack against WPA/WPA2 networks utilizing PSK-based verification
(e.g. WPA-Personal). Cowpatty can execute an enhanced attack if a recomputed
PMK document is accessible for the SSID that is being assessed.
6.
What is Network Enumeration?
Network Enumeration is the revelation of
hosts/gadgets on a network, they tend to utilize obvious disclosure protocols,
for example, ICMP and SNMP to gather data, they may likewise check different
ports on remote hosts for looking for surely known services trying to further
recognize the function of a remote host.
7.
Distinguish between phishing and spoofing?
Phishing and spoofing are totally different
beneath the surface. One downloads malware to your PC or network, and the other
part tricks you into surrendering sensitive monetary data to a cyber-crook.
Phishing is a technique for recovery, while spoofing is a method for delivery
8.
What do you mean by DOS (Denial of administration) assault? Explain. What are
the regular types of DOS assault?
Denial of Service, is a malicious attack on
network that is executed by flooding the system with useless traffic. Despite
the fact that DOS does not cause any data breach or security breach, it can
cost the site proprietor a lot of cash and time.
- Buffer
Overflow Attacks
- SYN
Attack
- Teardrop
Attack
- Smurf
Attack
- Viruses
9.
What do you understand by footprinting in ethical hacking? What are the
techniques utilized for foot printing?
Footprinting is nothing but accumulating and
revealing as much as data about the target network before gaining access into
any network. Open Source Footprinting : It will search for the contact data of
administrators that will be utilized for guessing password in Social
Engineering Network Enumeration :The hacker attempts to distinguish the domain
names and the network blocks of the target network Scanning : After the network
is known, the second step is to spy the active IP addresses on the network. For
distinguishing active IP addresses (ICMP) Internet Control Message Protocol is
a functioning IP addresses Stack Fingerprinting : the final stage of foot
printing step can be performed, once the hosts and port have been mapped by
examining the network, this is called Stack fingerprinting.
10.
What is a firewall?
A firewall could be a device that
allows/blocks traffic as per outlined set of rules. These are placed on the
boundary of trusted and untrusted networks.
11.
What is data leakage? How will you detect and prevent it?
Data leak is nothing but data knowledge
getting out of the organization in an unauthorized manner. Data will get leaked
through numerous ways in which – emails, prints, laptops obtaining lost,
unauthorized transfer of data to public portals, removable drives, pictures
etc. There are varied controls which may be placed to make sure that the info
doesn’t get leaked, many controls will be limiting upload on web websites,
following an internal encryption answer, limiting the emails to the interior
network, restriction on printing confidential data etc.
12.
What is SQL injection and its types?
If the application doesn’t sanitize the user
input then the SQL injection happens. Thus a malicious hacker would inject SQL
question to gain unauthorized access and execute administration operations on
the database. SQL injections may be classified as follows:
- Error-based
SQL injection
- Blind
SQL injection
- Time-based
SQL injection
13.
What's a denial of service (DOS) attack and what are the common forms?
DOS attacks involve flooding servers, systems
or networks with traffic to cause over-consumption of victim resources. This
makes it troublesome or not possible for legitimate users to access or use
targeted sites.
Common DOS attacks include:
- Buffer
overflow attacks
- ICMP
flood
- SYN
flood
- Teardrop
attack
- Smurf
attack
14.
Differentiate Between a MAC and an IP Address?
All networks across devices are assigned a
number which is unique, which is termed as MAC or Machine Access Control address.
This address may be a personal mail box on the net. The network router
identifies it. the amount may be modified anytime.All devices get their
distinctive information processing address so they can be located easily on a
given laptop and network. Whoever is aware of your distinctive information
processing address will contact you through it.
15.
What is SSL and why is it not enough when it comes to encryption?
SSL is identity verification, not hard
encryption. it’s designed to be able to prove that the person you’re engaging
on the other side is who they say they are. SSL and TLS are each used by almost
everyone online, however because of this it is a huge target and is mainly
attacked through its implementation (The Heartbleed bug for example) and its
far-famed methodology.
