nerdexam
GIAC

GSEC · Question #117

Which of the following attack vectors are addressed by Xinetd and TCP Wrappers? (A) Outsider attack from network (B) Outsider attack from a telephone (C) Insider attack from local network (D) Attack…

The correct answer is B. A and C. Xinetd and TCP Wrappers are host-based network access control tools that filter incoming connections by source IP or hostname, protecting against network-originated attacks whether from external or internal network segments.

Network Security

Question

Which of the following attack vectors are addressed by Xinetd and TCP Wrappers? (A) Outsider attack from network (B) Outsider attack from a telephone (C) Insider attack from local network (D) Attack from previously installed malicious code

Options

  • AA and B
  • BA and C
  • CB and D
  • DC and D

How the community answered

(38 responses)
  • A
    13% (5)
  • B
    79% (30)
  • C
    5% (2)
  • D
    3% (1)

Why each option

Xinetd and TCP Wrappers are host-based network access control tools that filter incoming connections by source IP or hostname, protecting against network-originated attacks whether from external or internal network segments.

AA and B

Choice A omits insider attacks from the local network (C), but TCP Wrappers filter by IP address regardless of whether the source is external or internal, so they do address local network threats.

BA and CCorrect

Xinetd and TCP Wrappers operate at the network socket level, inspecting and filtering TCP/UDP connection requests based on the source IP address or hostname. This directly blocks unauthorized outsiders attacking over a network (A) and insiders attacking from the local network segment (C), since both vectors involve IP-based network connections that these tools can evaluate and deny.

CB and D

Telephone-based attacks (B) bypass IP-based controls entirely because they exploit dial-up or modem interfaces, not TCP/IP network sockets that Xinetd or TCP Wrappers monitor.

DC and D

Previously installed malicious code (D) runs with local user or system privileges and does not arrive as an inbound network connection, so host-based network wrappers have no mechanism to detect or block it.

Concept tested: TCP Wrappers and Xinetd network access control scope

Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-tcp_wrappers_and_xinetd

Topics

#TCP Wrappers#xinetd#network access control#service filtering

Community Discussion

No community discussion yet for this question.

Full GSEC Practice