Deck 1: The Threat Environment

Question 1

About how long was the Sony PlayStation Network offline as a result of the cyber attacks?

A) 3 days
B) 3 weeks
C) 3 months
D) It never went down.

Answer 1

B

Question 2

The three common core goals of security are ________.

A) confidentiality, integrity, and availability
B) confidentiality, information, and availability
C) confidentiality, integrity, and authentication
D) confidentiality, information, and authorization

Answer 2

A

Question 3

When a threat succeeds in causing harm to a business, this is called a ________.

A) breach
B) compromise
C) incident
D) All of the above

Answer 3

D

Question 4

Another name for safeguard is ________.

A) countermeasure
B) compromise
C) Both A and B
D) Neither A nor B

Question 5

Threat environment consists of the types of attackers and attacks that companies face.

Question 6

Preventative countermeasures identify when a threat is attacking and especially when it is succeeding.

Question 7

The attack method used in the Sony data breaches was ________.

A) Cross-site scripting
B) SQL injection
C) Denial of service
D) None of the above

Question 8

Most countermeasure controls are preventative controls.

Question 9

When a threat succeeds in causing harm to a business, this is a(n) ________.

A) breach
B) countermeasure
C) Both A and B
D) Neither A nor B

Question 10

Which hacker group was likely involved in the Sony data breaches?

A) LulzSec
B) Wikileaks
C) Chaos Club 7
D) L33t |\|3RD5

Question 11

What were the approximate dollar losses for the series of data breaches against Sony Corp?

A) $54 million
B) $171 million
C) $254 million
D) $1.6 billion

Question 12

Confidentiality means that attackers cannot change or destroy information.

Question 13

Detective countermeasures keep attacks from succeeding.

Question 14

Detective countermeasures identify when a threat is attacking and especially when it is succeeding.

Question 15

Which of the following is a type of countermeasure?

A) Detective
B) Corrective
C) Both A and B
D) Neither A nor B

Question 16

Which of the following are types of countermeasures?

A) Preventative
B) Detective
C) Corrective
D) All of the above

Question 17

Preventative countermeasures keep attacks from succeeding.

Question 18

Why did hackers attack Sony Corp?

A) To test their technical skills
B) Because Sony was suing a fellow hacker
C) As part of a larger cyberwar exercise
D) Because Sony put a malicious rootkit on certain music disks

Question 19

Most countermeasure controls are detective controls.

Question 20

If an attacker breaks into a corporate database and deletes critical files, this is a attack against the ________ security goal.

A) integrity
B) confidentiality
C) Both A and B
D) Neither A nor B

Question 21

You accidentally find someone's password and use it to get into a system. This is hacking.

Question 22

________ is the destruction of hardware, software, or data.

A) Sabotage
B) Hacking
C) Extortion
D) Denial of Service

Question 23

Penalties for hacking are ________.

A) limited only if a hacker stole $1000
B) limited only if a hacker stole over $1,000,000
C) irrelevant of the amount stolen
D) none of the above

Question 24

Employees often have extensive knowledge of systems and can pose a greater risk than external attackers.

Question 25

In fraud, the perpetrator tries to obtain money or other goods by threatening to take actions that would be against the victim's interest.

Question 26

The terms "intellectual property" and "trade secret" are synonymous.

Question 27

The definition of hacking is "intentionally accessing a computer resource without authorization or in excess of authorization."

Question 28

Someone sends you a "game." When you run it, it logs you into an IRS server. This is hacking.

Question 29

In ________, the perpetrator tries to obtain money or other goods by threatening to take actions that would be against the victim's interest.

A) fraud
B) extortion
C) hacking
D) abuse

Question 30

In hacking, the perpetrator tries to obtain money or other goods by threatening to take actions that would be against the victim's interest.

Question 31

Employees are very dangerous because they ________.

A) often have access to sensitive parts of the system
B) are trusted by companies
C) Both A and B
D) Neither A nor B

Question 32

Misappropriation of assets is an example of employee financial theft.

Question 33

When considering penalties for hacking, motivation is irrelevant.

Question 34

________ consists of activities that violate a company's IT use policies or ethics policies.

A) Fraud
B) Extortion
C) Hacking
D) Abuse

Question 35

The definition of hacking is "accessing a computer resource without authorization or in excess of authorization."

Question 36

Employees pose an increased risk to organizations as they ofter have access to sensitive parts of systems.

Question 37

You have access to your home page on a server. By accident, you discover that if you hit a certain key, you can get into someone else's files. You spend just a few minutes looking around. This is hacking.

Question 38

What type of employee is the most dangerous when it comes to internal IT attacks?

A) Data entry clerks
B) Financial professionals
C) IT professionals
D) IT security professionals

Question 39

Downloading pornography can lead to sexual harassment lawsuits.

Question 40

________ is a generic term for "evil software."

A) Virus
B) Worm
C) Malware
D) Threat

Question 41

Rootkits replace legitimate programs and are considered a deeper threat than a set of programs called Trojan horses.

Question 42

You receive an e-mail that seems to come from your bank. Clicking on a link in the message takes you to a website that seems to be your bank's website. However, the website is fake. This is called a ________ attack. (Pick the most precise answer.)

A) social engineering
B) a hoax
C) phishing
D) spear fishing

Question 43

You receive an e-mail that seems to come from a frequent customer. It contains specific information about your relationship with the customer. Clicking on a link in the message takes you to a website that seems to be your customer's website. However, the website is fake. This is ________. (Pick the most precise answer.)

A) social engineering
B) a hoax
C) phishing
D) spear fishing

Question 44

Some ________ can jump directly between computers without human intervention.

A) viruses
B) worms
C) Both A and B
D) Neither A nor B

Question 45

The fastest propagation occurs with some types of ________.

A) viruses
B) worms
C) Trojan horses
D) bots

Question 46

A Trojan horse is a program that hides itself by deleting a system file and taking on the system file's name.

Question 47

A program that gives the attacker remote access control of your computer is specifically called a ________.

A) Trojan horse
B) spyware program
C) cookie
D) RAT

Question 48

In a virus, the code that does damage is called the ________.

A) exploit
B) compromise
C) payload
D) vector

Question 49

Mobile code usually is delivered through ________.

A) webpages
B) e-mail
C) directly propagating worms
D) All of the above

Question 50

Which type of program can hide itself from normal inspection and detection?

A) Trojan horse
B) Stealth Trojan
C) Spyware
D) Rootkit

Question 51

Most cookies are dangerous.

Question 52

________ are programs that attach themselves to legitimate programs.

A) Viruses
B) Worms
C) Both A and B
D) Neither A nor B

Question 53

________ can spread through e-mail attachments.

A) Viruses
B) Worms
C) Both A and B
D) Neither A nor B

Question 54

The definition of spam is "unsolicited commercial e-mail."

Question 55

Most traditional external attackers were heavily motivated by ________.

A) the thrill of breaking in
B) making money through crime
C) Both A and B
D) Neither A nor B

Question 56

________ attacks take advantage of flawed human judgment by convincing the victim to take actions that are counter to security policies. (Choose the best answer.)

A) Social engineering
B) Spam
C) E-mail attachment
D) Mobile code

Question 57

Nonmobile malware can be on webpages that users download.

Question 58

Mobile code usually is contained in webpages.

Question 59

Which of the following can be a type of spyware?

A) A cookie
B) A keystroke logger
C) Both A and B
D) Neither A nor B

Question 60

A ________ is a small program that, after installed, downloads a larger attack program.

A) Trojan horse
B) Trojan pony
C) Stub
D) Downloader

Question 61

Sending packets with false IP source addresses is called ________.

A) a IP address scanning attack
B) IP address spoofing
C) a port scanning attack
D) None of the above.

Question 62

A(n) ________ attack attempts to make a server or network unavailable to serve legitimate users by flooding it with attack packets.

A) virus
B) directly-propagating worm
C) DoS
D) bot

Question 63

In pretexting, an attacker calls claiming to be a certain person in order to ask for private information about that person.

Question 64

A botmaster can remotely ________.

A) fix a bug in the bots
B) update bots with new functionality
C) Both A and B
D) Neither A nor B

Question 65

Botnets usually have multiple owners over time.

Question 66

Most traditional external hackers cause extensive damage or commit theft for money.

Question 67

Most traditional external hackers do not cause extensive damage or commit theft for money.

Question 68

ICMP Echo messages are often used in ________.

A) IP address scanning
B) port scanning
C) Both A and B
D) Neither A nor B

Question 69

Attackers cannot use IP address spoofing in port scanning attack packets.

Question 70

Attackers rarely use IP address spoofing to conceal their identities.

Question 71

Which of the following are examples of social engineering?

A) Wearing a uniform to give the appearance that you work at a business
B) Gaining unauthorized access by following an authorized individual in to a business
C) None of the above
D) All of the above

Question 72

Watching someone type their password in order to learn the password is called ________.

A) piggybacking
B) shoulder surfing
C) Both A and B
D) Neither A nor B

Question 73

Social engineering is rarely used in hacking.

Question 74

To obtain IP addresses through reconnaissance, an attacker can use ________.

A) IP address spoofing
B) a chain of attack computers
C) Both A and B
D) Neither A nor B

Question 75

Following someone through a secure door for access without using an authorized ID card or pass code is called ________. (Choose the most specific answer.)

A) door hacking
B) social engineering
C) piggybacking
D) shoulder surfing

Question 76

In response to a chain of attack, victims can often trace the attack back to the final attack computer.

Question 77

The primary purpose for attackers to send port scanning probes to hosts is to identify which ports are open.

Question 78

Traditional hackers are motivated by ________.

A) thrill
B) validation of power
C) doing damage as a by-product
D) All of the above

Question 79

Generally speaking, script kiddies have high levels of technical skills.

Question 80

A(n) ________ attack requires a victim host to prepare for many connections, using up resources until the computer can no longer serve legitimate users. (Choose the most specific choice.)

A) DoS
B) directly-propagating worm
C) distributed malware
D) SYN Flooding