Question 1

Jerry Schneider was able to amass operating manuals and enough technical data to steal $1 million of electronic equipment by
A)scavenging.
B)skimming.
C)Internet auction fraud.
D)cyber extortion.

Accepted Answer

Jerry Schneider was able to steal electronic equipment worth $1 million by scavenging operating manuals and gathering technical data. Scavenging allowed him to collect these materials and gain knowledge about the equipment, which he then used to steal it. Skimming refers to the theft of small amounts of money from transactions, internet auction fraud is a type of scam where deceptive practices are used to deceive people into giving up money, and cyber extortion involves threatening someone online to obtain something of value. None of these other options are related to the method that Schneider used to steal the equipment.

Question 2

It was late on a Friday afternoon when Chloe Pike got a call at the help desk for Taggart Corp.A man with an edge of panic in his voice was on the phone."I'm really in a bind and I sure hope that you can help me." He identified himself as Joe Andrew from the accounting department of Taggart Corp.He told Chloe that he had to work on a report that was due on Monday morning and that he had forgotten to bring a written copy of his new password home with him.Chloe knew that Taggart's new password policy required that passwords be at least fifteen characters long,must contain letters and numbers,and must be changed every sixty days,had created problems for many users.Consequently,Chloe provided the password to Joe.The caller turned out not to be Joe Andrew,and Chloe was a victim of
A)phreaking.
B)war dialing.
C)identity theft.
D)social engineering.

Accepted Answer

The scenario describes a case of social engineering, where the caller tricked Chloe into revealing sensitive information by posing as someone else with a sense of urgency. The caller exploited Chloe's willingness to help and knowledge of the password policy to gain unauthorized access.

Question 3

Mircea Vasilescu maintains an online brokerage account.In early March,Mircea received an e-mail from the firm that explained that there had been a computer error and asked Mircea to call a phone number to verify his customer information.When Mircea called the number,a recording asked that he enter the code from the e-mail,his account number,and his social security number.After he did so,he was told that he would be connected with a customer service representative,but the connection was terminated.He contacted the brokerage company and was informed that they had not sent the e-mail.Mircea was a victim of
A)Bluesnarfing.
B)vishing.
C)splogging.
D)typosquatting.

Accepted Answer

Mircea was targeted by vishing, which is a combination of "voice" and phishing. In this case, the attackers used the phone system to steal Mircea's personal information by tricking him into revealing it through the automated system. The e-mail was likely a fake message designed to make the request appear legitimate.

Question 4

Hunter Carr is an accountant with AcctSmart.The firm has a very strict policy of requiring all users to change their passwords every sixty days.In early March,Hunter received an e-mail claiming that there had been an error updating his password and it provided Hunter with a link to a website with instructions for re-updating his password.Something about the e-mail made Hunter suspicious,so he called AcctSmart's information technology department and found that the e-mail was fictitious.The e-mail was an example of
A)social engineering.
B)piggybacking.
C)spamming.
D)phishing.

Accepted Answer

The e-mail Hunter received is an example of phishing, which is the practice of sending fraudulent e-mails, text messages or websites in order to trick people into giving away sensitive information, such as passwords or credit card numbers. The e-mail was designed to look like it came from AcctSmart and aimed to get Hunter to enter his password on a fake website. Hunter's suspicion and confirmation from AcctSmart's IT department saved him from falling into the phishing trap.

Question 5

Jim Cooper decided to do some Christmas shopping online.He visited Amazon.com,found a perfect gift for his daughter,and placed his order.It was only later when he noticed that the website's URL that he had placed the order was actually Amazom.com and not Amazon.com.Jim was a victim of
A)Bluesnarfing.
B)splogging.
C)vishing.
D)typosquatting.

Accepted Answer

Jim was a victim of typosquatting, which involves registering a domain name similar to a popular website or brand in order to deceive people into visiting it and potentially revealing sensitive information. In this case, the website Amazom.com was designed to look like Amazon.com and tricked Jim into thinking it was the legitimate site, leading him to make a purchase and potentially disclose his personal or financial information.

Question 6

Ashley Baker works in the information technology department of Core Company.On Monday morning,she arrived at work,scanned her identity card,and entered her access code.At that moment,a man in a delivery uniform came up behind Ashley with a bunch of boxes.Although Ashley held the door for the delivery man,she later wondered if the man was engaged in
A)pretexting.
B)piggybacking.
C)posing.
D)spoofing.

Accepted Answer

The scenario describes piggybacking, which is the act of an unauthorized person following an authorized person into a restricted area without proper authentication. The delivery man was not authorized to enter the building, but Ashley held the door open for him, thereby allowing him to gain entry without authentication.

Question 7

Describe the various form of spoofing.Select one type of spoofing and search for an actual case about the spoofing.Discuss what has happened and provide recommendations as to how the spoofing could have been prevented.

Accepted Answer

The answer of Describe the various form of spoofing.Select one...

Question 8

Ashley Baker has been the webmaster for Berryhill Finance only ten days when she received an e-mail that threatened to shut down Berryhill's website unless Ashley wired payment to an overseas account.Ashley was concerned that Berryhill Finance would suffer huge losses if its website went down,so she wired money to the appropriate account.The author of the e-mail successfully committed
A)a denial-of-service attack.
B)Internet terrorism.
C)hacking.
D)cyber-extortion.

Accepted Answer

The author of the e-mail committed cyber-extortion by threatening to shut down Berryhill Finance's website unless payment was made.

Question 9

Which method of fraud is physical in its nature rather than electronic?
A)cracking
B)hacking
C)eavesdropping
D)scavenging

Accepted Answer

Scavenging is the act of physically searching for discarded materials or information that can be used to commit fraud, such as searching through trash or stealing mail. The other options (cracking, hacking, and eavesdropping) involve electronic methods of fraud.

Question 10

Illegally obtaining and using confidential information about a person for economic gain is known as
A)eavesdropping.
B)identity theft.
C)packet sniffing.
D)piggybacking.

Accepted Answer

Illegally obtaining and using confidential information for economic gain is known as identity theft. Eavesdropping, packet sniffing, and piggybacking may involve the interception of data or communication, but they do not necessarily involve the intent to use confidential information for economic gain.

Question 11

Ashley Baker has been the webmaster for Berryhill Finance only ten days when Berryhill's website was flooded with access attempts.Ashley shut down the site and only opened it to Web addresses which she specifically identified as legitimate.As a result,many of Berryhill's customers were unable to obtain loans,causing Berryhill to lose a significant amount of business.Berryhill Finance suffered from a
A)denial-of-service attack.
B)zero-day attack.
C)phreaking attack.
D)cyber-extortion attack.

Accepted Answer

The scenario describes a flood of access attempts that led to the shutdown of the website, which is consistent with a denial-of-service attack. A denial-of-service attack is a malicious attempt to disrupt the normal traffic of a targeted server, service, or network by overwhelming the target or its surrounding infrastructure with a flood of Internet traffic. As a result of the attack, Berryhill Finance lost significant business as its legitimate customers were unable to access the website.

Question 12

Ashley Baker has been the webmaster for Berryhill Finance only ten days when Berryhill's website was scheduled for a routine security patch update.Unbeknown to Ashley,cybercrooks found out the timing of the patch update and launched attacks right before Berryhill's update from a remote location miles away.As a result of the attack,Berryhill lost a significant amount of clients' private information.Berryhill Finance suffered from a
A)hacking attack.
B)zero-day attack.
C)identity theft attack.
D)cyber-extortion attack.

Accepted Answer

A zero-day attack occurs when hackers exploit a vulnerability before it is patched, which is what happened when the cybercrooks attacked Berryhill Finance right before the scheduled security patch update.

Question 13

Offering a free website,then charging the phone bills of the individuals who signed up for the free website is known as
A)snarfing.
B)web cramming.
C)podpounding.
D)e-scraping.

Accepted Answer

Web cramming is the practice of offering a free website but then charging the phone bills of the individuals who sign up for it without their knowledge or consent. Snarfing refers to the unauthorized copying of data from another website, podpounding is not a term commonly used in relation to unethical online practices, and e-scraping is the act of extracting data from websites using automated tools, without permission.

Question 14

Maureen Boyd was arrested in Kansas City for running an online business that specialized in buying and reselling stolen credit card information.Maureen was charged with
A)typosquatting.
B)carding.
C)pharming.
D)phishing.

Accepted Answer

Maureen Boyd was arrested for running an online business that specialized in buying and reselling stolen credit card information, which falls under the category of carding. Typosquatting involves registering domain names similar to popular sites in order to redirect traffic and potentially steal personal information. Pharming is a type of online scam that redirects users to a fake website in order to extract personal information. Phishing involves trying to trick individuals into divulging sensitive information through fraudulent emails or messages.

Question 15

Which of the following is the easiest method for a computer criminal to steal output without ever being on the premises?
A)dumpster diving
B)use of a Trojan horse
C)using a telescope to peer at paper reports
D)electronic eavesdropping on computer monitors

Accepted Answer

Electronic eavesdropping on computer monitors, also known as "shoulder surfing," can be done remotely with the use of software and hardware that can intercept and capture the data being displayed on a computer screen without physically being on the premises. This method is easier than dumpster diving or using a telescope to peer at paper reports, and more effective than a Trojan horse, which would require the criminal to gain access to the system first.

Question 16

Recall that students used Facebook and VKontakte to identify Russian money laundering mules.What fraud case did these students help foil?
A)Zeus
B)Trident Breach
C)Nigerian Banking
D)InfraGard

Accepted Answer

The students helped foil the Trident Breach fraud case by using Facebook and VKontakte to identify Russian money laundering mules.

Question 17

On the weekends,Mary Andersen climbs into her Toyota Camry and drives around the city of Las Vegas looking for unprotected wireless networks to exploit.Mary is most likely engaging in
A)snarfing.
B)Wi-pilfering.
C)war driving.
D)data slurping.

Accepted Answer

War driving is the act of driving around in a vehicle equipped with a wireless-enabled device searching for wireless access points or unsecured networks. Mary Andersen is doing the same, so she is engaging in war driving. Snarfing, Wi-pilfering, and data slurping also relate to unauthorized access to wireless networks, but they do not involve driving around in search of networks.

Question 18

Zeus is an example of a
A)virus.
B)worm.
C)Trojan horse.
D)war dialing.

Accepted Answer

Zeus is a type of Trojan horse malware that infects computer systems and steals sensitive information, such as login credentials and banking information. It is not a virus, worm, or war dialing tool.

Question 19

When a computer criminal gains access to a system by searching through discarded records,this is referred to as
A)data diddling.
B)dumpster diving.
C)eavesdropping.
D)data squatting.

Accepted Answer

Dumpster diving refers to the act of searching through discarded materials, such as paper records or electronic devices, to gather sensitive information that can be used to gain unauthorized access to a system.

Question 20

Describe at least six computer attacks and abuse techniques.

Accepted Answer

The answer of Describe at least six computer attacks and...

Quiz 6: Computer Fraud and Abuse Techniques

Jerry Schneider was able to amass operating manuals and enough technical data to steal $1 million of electronic equipment by

Jim Cooper decided to do some Christmas shopping online.He visited Amazon.com,found a perfect gift for his daughter,and placed his order.It was only later when he noticed that the website's URL that he had placed the order was actually Amazom.com and not Amazon.com.Jim was a victim of

Describe the various form of spoofing.Select one type of spoofing and search for an actual case about the spoofing.Discuss what has happened and provide recommendations as to how the spoofing could have been prevented.

Which method of fraud is physical in its nature rather than electronic?

Illegally obtaining and using confidential information about a person for economic gain is known as

Offering a free website,then charging the phone bills of the individuals who signed up for the free website is known as

Maureen Boyd was arrested in Kansas City for running an online business that specialized in buying and reselling stolen credit card information.Maureen was charged with

Which of the following is the easiest method for a computer criminal to steal output without ever being on the premises?

Recall that students used Facebook and VKontakte to identify Russian money laundering mules.What fraud case did these students help foil?

On the weekends,Mary Andersen climbs into her Toyota Camry and drives around the city of Las Vegas looking for unprotected wireless networks to exploit.Mary is most likely engaging in

Zeus is an example of a

When a computer criminal gains access to a system by searching through discarded records,this is referred to as

Describe at least six computer attacks and abuse techniques.