1. If an attacker breaks into a corporate database, modifies some information and deletes critical files, against what security goal or goals is this attack aimed?

2. If you accidentally find someone's password and use it to get into a system, is this hacking? Explain.

3. Why do you think DoS attackers use zombies to attack victims instead of sending attack packets directly to victims? Come up with two reasons.

4. What do you think are the pros and cons of paying off extortionists?

5. Read the Top Cyber Risks Report posted at
http://www.sans.org/top-cyber-security-risks/
then write a one page summary emphasizing main points presented in the report. Also, include in your summary three things not mentioned in the report's executive summary.

6. Use whois at Network Solutions, netsol.com and/or whois.arin.net to find contact information and DNS servers for one organization. Also find the IP address range for their network. Print your results.

7. Use the tracert command at the command prompt on a windows system to determine the path from the system you are using to one of the DNS servers for this organization. Print the path you find. You might find that ICMP responses are not allowed after a certain point. (Do this operation just once.)