Common network protocols and vulnerabilities in Cybersecurity - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to identify the protocol used for secure web browsing.

Cybersecurity

The protocol used for secure web browsing is [1].

Drag options to blanks, or click blank then click option'

AFTP

BDNS

CSMTP

DHTTPS

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing HTTP with HTTPS

Choosing FTP which is for file transfer

HTTPS is the protocol used for secure web browsing by encrypting data between the browser and server.

2fill in blank

medium

Complete the code to name the protocol primarily used to send emails.

Cybersecurity

The protocol mainly used to send emails is [1].

Drag options to blanks, or click blank then click option'

ASMTP

BPOP3

CIMAP

DHTTP

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing POP3 or IMAP which are for receiving emails

Selecting HTTP which is for web traffic

SMTP (Simple Mail Transfer Protocol) is used to send emails from a client to a server or between servers.

3fill in blank

hard

Fix the error in the statement about a common network vulnerability.

Cybersecurity

A common vulnerability that allows attackers to intercept and alter communication is called [1] attack.

Drag options to blanks, or click blank then click option'

AMan-in-the-Middle

BSQL Injection

CDDoS

DPhishing

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing with phishing which is a social engineering attack

Choosing DDoS which is about overwhelming servers

A Man-in-the-Middle attack involves intercepting and possibly altering communication between two parties without their knowledge.

4fill in blank

hard

Fill both blanks to complete the description of a protocol and its vulnerability.

Cybersecurity

The [1] protocol is vulnerable to [2] attacks because it transmits data in plain text.

Drag options to blanks, or click blank then click option'

AFTP

BDNS Spoofing

CTelnet

DCross-Site Scripting

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing FTP which is also unencrypted but less related to DNS Spoofing

Selecting Cross-Site Scripting which is a web vulnerability

Telnet sends data without encryption, making it vulnerable to DNS Spoofing attacks where attackers redirect traffic to malicious sites.

5fill in blank

hard

Fill all three blanks to complete the dictionary comprehension describing protocols and their ports.

Cybersecurity

protocol_ports = { [1]: [2][[1]] for [1] in [3] }

Drag options to blanks, or click blank then click option'

Ap

B{'HTTP': 80, 'HTTPS': 443, 'FTP': 21}

C['HTTP', 'HTTPS', 'FTP']

Dport

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'port' instead of 'p' as loop variable

Incorrect dictionary format for ports

This dictionary comprehension assigns the correct port numbers to each protocol in the list.

Practice

1. Which protocol is primarily used to securely browse websites by encrypting data between your browser and the server?

easy

A. HTTPS

B. FTP

C. HTTP

D. DNS

Solution

1. Step 1: Understand the purpose of HTTPS

   HTTPS stands for HyperText Transfer Protocol Secure and encrypts data to protect privacy.

2. Step 2: Compare with other protocols

   HTTP is not secure, FTP is for file transfer, and DNS resolves domain names, none encrypt data like HTTPS.

3. Final Answer:

   HTTPS -> Option A

4. Quick Check:

   Secure web browsing = HTTPS [OK]

Hint: Secure web browsing uses HTTPS, not HTTP or FTP [OK]

Common Mistakes:

• Confusing HTTP with HTTPS
• Thinking FTP encrypts web data
• Assuming DNS secures browsing

2. Which of the following is the correct port number for the FTP protocol by default?

easy

A. 80

B. 21

C. 443

D. 53

Solution

1. Step 1: Recall default FTP port

   FTP (File Transfer Protocol) uses port 21 by default for control commands.

2. Step 2: Identify other ports

   Port 80 is for HTTP, 443 for HTTPS, and 53 for DNS, so they are incorrect for FTP.

3. Final Answer:

   21 -> Option B

4. Quick Check:

   FTP default port = 21 [OK]

Hint: FTP control commands use port 21 by default [OK]

Common Mistakes:

• Choosing port 80 (HTTP) for FTP
• Confusing HTTPS port 443 with FTP
• Selecting DNS port 53

3. Consider this simplified code snippet simulating a DNS query response check:

response = {'status': 'NOERROR', 'data': '1.2.3.4'}
if response['status'] == 'NOERROR':
    print('Valid IP:', response['data'])
else:
    print('Error in DNS response')

What will be printed?

medium

A. Valid IP: 1.2.3.4

B. KeyError

C. Valid IP: NOERROR

D. Error in DNS response

Solution

1. Step 1: Check the condition on response status

   The code checks if response['status'] equals 'NOERROR', which it does.

2. Step 2: Determine the printed output

   Since condition is true, it prints 'Valid IP:' followed by response['data'], which is '1.2.3.4'.

3. Final Answer:

   Valid IP: 1.2.3.4 -> Option A

4. Quick Check:

   response['status'] == 'NOERROR' prints IP [OK]

Hint: Check condition first; if true, print IP from data key [OK]

Common Mistakes:

• Confusing status with data value
• Expecting error when none occurs
• Assuming KeyError without missing keys

4. A network administrator notices that FTP traffic is being intercepted and credentials stolen. Which vulnerability is most likely being exploited?

medium

A. SQL Injection

B. DNS Spoofing

C. Man-in-the-Middle Attack

D. Cross-Site Scripting

Solution

1. Step 1: Identify the nature of the attack

   Intercepting FTP traffic and stealing credentials indicates someone is spying on communication.

2. Step 2: Match with known vulnerabilities

   Man-in-the-Middle (MitM) attacks intercept and alter communication between two parties, fitting this scenario.

3. Final Answer:

   Man-in-the-Middle Attack -> Option C

4. Quick Check:

   Intercepted FTP = Man-in-the-Middle [OK]

Hint: Intercepted communication usually means Man-in-the-Middle attack [OK]

Common Mistakes:

• Confusing with DNS Spoofing
• Thinking SQL Injection affects FTP
• Mixing with Cross-Site Scripting

5. You want to secure a company's email communication. Which protocol should you use to encrypt emails during transmission to prevent eavesdropping?

hard

A. FTP

B. Telnet

C. HTTP

D. SMTP with STARTTLS

Solution

1. Step 1: Identify email transmission protocols

   SMTP is the standard protocol for sending emails, but by default it is unencrypted.

2. Step 2: Choose encryption method for SMTP

   STARTTLS upgrades SMTP to use encryption, protecting emails from eavesdropping during transmission.

3. Step 3: Exclude other protocols

   FTP is for file transfer, HTTP is for web browsing, and Telnet is insecure remote access; none encrypt email.

4. Final Answer:

   SMTP with STARTTLS -> Option D

5. Quick Check:

   Email encryption during send = SMTP + STARTTLS [OK]

Hint: Use SMTP with STARTTLS to encrypt email sending [OK]

Common Mistakes:

• Choosing FTP or HTTP for email
• Ignoring encryption in SMTP
• Selecting Telnet which is insecure