Question 1

Spyware is defined as a type of software that:

Accepted Answer

Spyware is software that is designed to monitor a computer user's actions or scan for files without the user's knowledge or consent. This can include keystrokes, web browsing history, personal information, and more. It is often used for malicious purposes, such as stealing personal information or displaying targeted advertising.

Question 2

A screen capture can be defined as a type of software that:

Accepted Answer

Screen capture software records the pixels appearing on a user's screen, effectively capturing what is displayed.

Question 3

Which of the following measures can a firm undertake to counter the threat of an SQL injection?

Accepted Answer

The answer of Which of the following measures can a...

Question 4

A domain name service is a collection of software that:

Accepted Answer

A domain name service (DNS) maps an Internet address (such as a URL) to an IP address. This allows users to access websites and other resources on the Internet through easy-to-remember domain names, rather than numerical IP addresses.

Question 5

The e-mail password of a senior employee in an organization was compromised by someone looking over as the employee accessed his account. This is most likely a case of:

Accepted Answer

Shoulder surfing involves someone looking over someone's shoulder to steal sensitive information such as passwords. In this case, someone saw the senior employee's password while they were accessing their account, making shoulder surfing the most likely cause of the password compromise.

Question 6

Computer systems are often infected with malware by means of exploits that sneak in masquerading as something they are not. These exploits are called:

Accepted Answer

The term "trojan" refers to a type of malware that disguises itself as something else, such as a legitimate software update or a harmless email attachment, to trick users into downloading and executing it. Once installed, trojans can give attackers unauthorized access to a user's computer and steal sensitive data. Rootkits, viruses, and worms are different types of malware that may use different methods to infect a system. Honeypots are not exploits, but rather a type of security mechanism used to detect and deflect attacks.

Question 7

Sifting through trash in an effort to uncover valuable data or insights that can be stolen or used to launch a security attack is known as:

Accepted Answer

The term used for sifting through trash to uncover valuable data or insights is "dumpster diving." None of the other options are commonly used or recognized terms.

Question 8

You have received an e-mail that looks suspiciously close to a phishing mail. What is the best course of action to be followed?

Accepted Answer

It is always best to err on the side of caution when it comes to suspicious emails. Do not click on any links or download any attachments, as they may contain malware or direct you to a fake website that could steal your personal information. If you are unsure about the legitimacy of an email, it is best to verify with the sender before taking any action.

Question 9

Which weakness of Web sites to launch attacks does an SQL injection technique exploit?

Accepted Answer

SQL injection technique exploits the weakness of sloppy programming practices where software developers do not validate user input. It allows attackers to inject malicious SQL code into the web application's database, potentially giving them access to sensitive information or even control of the entire database.

Question 10

Which of the following actions should users take to protect themselves from security attacks?

Accepted Answer

The answer of Which of the following actions should users...

Question 11

Some of the most common guidelines issued by Web sites when designing a secure password include:

Accepted Answer

The answer of Some of the most common guidelines issued...

Question 12

Attacks that are so new that they have not been clearly identified, and so have not made it into security screening systems are called _____.

Accepted Answer

Zero-day exploits are attacks that are so new that they have not been clearly identified, and so have not made it into security screening systems. These exploits take advantage of vulnerabilities in software or hardware that the vendor is not aware of and has not had time to develop a patch for. This can make them particularly dangerous, as they may be used by attackers for a significant period of time before they are discovered and patched.

Question 13

Attacks that exhaust all possible password combinations in order to break into an account are called _____ attacks.

Accepted Answer

Brute-force attacks are the ones that exhaust all possible password combinations until the correct one is found. The other options are unrelated to password cracking methods.

Question 14

A bank customer receives a message, ostensibly from the bank's Web site, asking her to provide her login information. Assuming the message is intended to defraud the customer, what type of infiltration technique is being used here?

Accepted Answer

This scenario describes a phishing attempt, in which an attacker attempts to trick the user into giving up their login credentials by posing as a legitimate entity, such as a bank.

Question 15

_____ can be either software-based or hardware, such as a recording "dongle" that is plugged in between a keyboard and a PC.

Accepted Answer

The term that fits the description provided is "keyloggers," which can be either software-based or hardware. Shadow-keyboards, bootloggers, rootkits, and adwares are not relevant to this description.

Question 16

Technologies that measure and analyze human body characteristics for identification or authentication are known as _____.

Accepted Answer

Technologies that measure and analyze human body characteristics for identification or authentication are known as biometrics.

Question 17

Briefly explain the steps one should take to ensure that their highest priority accounts are not compromised easily by hackers.

Accepted Answer

The answer of Briefly explain the steps one should take...

Question 18

Viruses are programs that infect other software or files and require:

Accepted Answer

Viruses require an executable program to spread. They typically attach themselves to an existing program and are spread when that program is executed.

Question 19

Which of the following statements holds true for the term encryption?

Accepted Answer

Encryption refers to the process of scrambling data using a code or formula, known as a cipher, such that it is hidden from those who do not have the unlocking key. This is done to protect sensitive information from unauthorized access.

Question 20

Which of the following statements holds true for the term spoof?

Accepted Answer

Spoofing refers to the act of falsifying information in order to make it appear as though it came from a different source. In the case of e-mail transmissions or packets, this can be done to trick recipients into revealing sensitive information or to deliver malware.

Quiz 14: Information Security: Barbarians at the Gateway and Just About Everywhere Else