Question 1

______ typically work independently to expose security vulnerabilities or practices that endanger individuals' private data.

Accepted Answer

Gray hats operate in a moral gray area, often working independently to expose security vulnerabilities without the permission of the organization but with the intention of improving security rather than exploiting it.

Question 2

The negative connotation of the word hacker could be defined as "a malicious meddler who tries to discover sensitive information by poking around. Hence password hacker, network hacker. The correct term for this sense is cracker."

Accepted Answer

The definition provided accurately explains the negative connotation of the word hacker and recommends using the term "cracker" instead.

Question 3

Advanced hackers are typically motivated by financial or political goals.

Accepted Answer

Advanced hackers often seek financial gain by stealing valuable data or by conducting ransomware attacks. They may also be motivated by political or ideological goals, such as disrupting government operations or stealing sensitive information for espionage purposes.

Question 4

International threats are those that originate from inside the company or organization.

Accepted Answer

International threats are those that originate from outside the company or organization, such as competitors, political unrest, or economic instability in other countries. Internal threats come from within the company, such as employee theft, data breaches caused by employees, or sabotage.

Question 5

Insiders are people who are current or former employees of a company, contractors, or friends of employees.

Accepted Answer

Insiders are people who are familiar with a company's operations and have access to sensitive information due to their connection with the company. This includes current or former employees, contractors, and friends of employees.

Question 6

All of the following are examples of social engineering except ______.

Accepted Answer

Social engineering refers to tactics used by cybercriminals to manipulate people into divulging sensitive information. Spam, on the other hand, is unsolicited emails that flood inboxes with irrelevant information or ads, but does not necessarily involve manipulation or deception. Vishing, phishing, and impersonation all involve tricking or deceiving people in some way to gain access to their sensitive information or systems.

Question 7

Social engineering is any act that influences a person to take an action that may or may not be in his or her best interest.

Accepted Answer

This is the definition of social engineering, where someone manipulates or tricks people into divulging sensitive information or performing actions that could compromise their security.

Question 8

Identify and discuss the four tips for protecting private information that were provided by Edward Snowden. Can you think of any others? If so, which ones?

Accepted Answer

The answer of Identify and discuss the four tips for...

Question 9

Identify and explain international threats and the three main forms associated with those threats. Are there any recent examples of international threats that fall within the three forms?

Accepted Answer

The answer of Identify and explain international threats and the...

Question 10

National threats originate from individuals inside the United States, aiming to attack local or national governments and infrastructures.

Accepted Answer

While external threats from other countries or groups may also exist, there have been instances of individuals or groups within the United States planning or carrying out attacks on government or infrastructure targets. Examples of such threats include domestic terrorism and cyberattacks.

Question 11

Low probability that the criminals will get caught and convicted and public exposure are some of the reasons as to why so few victims report the crimes.

Accepted Answer

This is a common reason why many victims of crimes, such as sexual assault or domestic violence, may not report the crime to the authorities or seek help. They may fear that they will not be believed, or that the process of reporting and pursuing legal action will be traumatic or ineffective. Additionally, victims may worry about retaliation from their abuser or stigmatization from society.

Question 12

Which of the following laws does not apply to hackers?

Accepted Answer

None of the laws mentioned apply to hackers, as they are generalizations and stereotypes. It is not accurate or fair to paint all hackers as evil people.

Question 13

Using two-factor identification is recommended for protecting private information, such as using a password and a fingerprint or other physical device.

Accepted Answer

Using two-factor identification is recommended for added security as it requires something you know (such as a password) and something you have (such as a physical device) to access private information. This provides an extra layer of protection against potential unauthorized access.

Question 14

Hackers who are motivated by financial gains and who conduct both bad and ethical hacking are referred to as ______.

Accepted Answer

Gray hats are hackers who are motivated by financial gains and are known to conduct both bad and ethical hacking activities. Black hats only engage in malicious hacking while white hats focus on ethical hacking to improve security systems. Green hats are inexperienced or novice hackers.

Question 15

Explain displeasure with the government and why groups such as Anonymous launch cyberattacks. Why do they launch cyberattacks? Do you agree with the work of such hacktivist groups? Why or why not?

Accepted Answer

The answer of Explain displeasure with the government and why...

Question 16

Hackers with their abilities to research vulnerabilities in software products and disclose them to companies that developed the software are known as ______.

Accepted Answer

Hackers who research vulnerabilities in software products and disclose them to the companies that created the software are known as ethical hackers. They help organizations identify and fix vulnerabilities before they can be exploited by malicious attackers.

Question 17

Explain hackernomics and identify five laws that apply to hackers.

Accepted Answer

The answer of Explain hackernomics and identify five laws that...

Question 18

Malicious insiders may delete or expose sensitive information by incident-either by pressing a wrong key or by other errors.

Accepted Answer

Malicious insiders intentionally compromise information security, whereas accidental deletion or exposure due to errors would be considered the actions of negligent or unintentional insiders, not malicious ones.

Question 19

Identify and discuss the three main types of insider threats.

Accepted Answer

The answer of Identify and discuss the three main types...

Question 20

Some of the most common insider cybersecurity crimes are cyberbullying and cyberharassment.

Accepted Answer

Insider cybersecurity crimes typically involve unauthorized access, theft of confidential data, sabotage, or fraud. Cyberbullying and cyberharassment are not typically considered cybersecurity crimes as they do not involve breaching security systems or compromising data. They may still be criminal acts, but they fall under different categories of law enforcement.

Quiz 5: Threats to Cybersecurity by Hacktivists and Nation States