Question 1

Which of the following is used to ensure that only humans obtain free email accounts?
A)Atomicity,consistency,isolation,and durability (ACID)
B)Microprocessor without Interlocked Pipeline Stages (MIPS)
C)Completely Automated Public Turing Test to Tell Computers and Humans Apart (CAPTCHA)
D)Document Style Semantics and Specification Language (DSSSL)

Accepted Answer

CAPTCHA is a mechanism for distinguishing between humans and automated programs, preventing bots from creating free email accounts.

Question 2

Which of the following best describes spear-phishing?
A)The phisher sends a survey to the employees of several organizations to obtain details of the configuration of their computing devices.
B)The phisher sends a voice mail message to a number of people to call a phone number or access a Web site.
C)The phisher sends legitimate-looking text messages through his or her phone to advertise a certain organization.
D)The phisher sends fraudulent emails to a certain organization's employees disguising them as mails from high-level executives from within the organization.

Accepted Answer

Spear-phishing involves a targeted attack in which the phisher sends fraudulent emails to a certain organization's employees disguising them as mails from high-level executives from within the organization. The emails often contain a request for sensitive information or may instruct the recipient to click on a link to a malicious website.

Question 3

Botnet computers are also called _____.
A)zombies
B)daemons
C)narutus
D)konohas

Accepted Answer

Botnet computers are commonly referred to as zombies, which is a term used to describe computers that have been infected with malware and can be remotely controlled by a hacker. Daemons are processes in the background of a computer's operating system, while Narutus and Konohas are terms from the anime series Naruto and not related to botnets.

Question 4

_____ is the abuse of email systems to send unsolicited email to large numbers of people.
A)Cyberespionage
B)Spam
C)Phishing
D)Smishing

Accepted Answer

Spam is the abuse of email systems to send unsolicited email to large numbers of people.

Question 5

Identify a true statement about smishing.
A)The phisher sends legitimate-looking messages through phone to acquire personal information.
B)The phisher sends a survey email to obtain the configuration of an unsuspecting user's computing device.
C)The phisher sends a voice mail message to an unsuspecting user to call a phone number or access a Web site.
D)The phisher sends fraudulent emails to a certain organization's employees.

Accepted Answer

Smishing involves sending text messages that appear to be from reputable sources to trick individuals into providing personal information.

Question 6

Identify the attack in which a malicious hacker floods a target site with demands for data and other small tasks.
A)Distributed denial-of-service
B)Smishing
C)Logic bomb
D)Phishing

Accepted Answer

This is a classic definition of a Distributed Denial-of-Service (DDoS) attack, where the attacker uses multiple computers or devices to flood a target site with requests, overwhelming its capacity and making it unavailable to legitimate users. The requests can be for data or other small tasks, causing the server to slow down or crash. Smishing, phishing, and logic bomb attacks are different types of cyberattacks that use various techniques to compromise or damage the target system or users.

Question 7

Identify the mode of message transmission used in vishing.
A)Multimedia Messaging Service
B)Short Message Service
C)Email
D)Voice mail

Accepted Answer

Vishing (voice phishing) is a type of social engineering attack that uses the phone system to obtain sensitive information from individuals, such as credit card numbers and passwords. The mode of message transmission used in vishing is typically through voice mail, where the attacker leaves a message that appears to be from a reputable source (such as a bank or government agency) and instructs the victim to call back a certain number to resolve an urgent issue.

Question 8

Identify a true statement about Trojan horses.
A)They lead consumers to counterfeit Web sites designed to trick them into divulging personal data.
B)They are used by organizations to test the security of information systems.
C)They involve the use of Short Message Service (SMS)texting for phishing.
D)They spy on users by recording keystrokes and transmitting them to a server operated by a third party.

Accepted Answer

Trojan horses are malicious software that disguise themselves as legitimate programs to deceive users into installing them. They are designed to give remote access to hackers and can be used to spy on users, record keystrokes, steal personal data, and even take control of computers or networks.

Question 9

Identify the mode of message transmission used in smishing.
A)Multimedia Messaging Service
B)Short Message Service
C)Email
D)Voice mail

Accepted Answer

Smishing uses Short Message Service (SMS) to transmit malicious messages to the targeted victims.

Question 10

Which of the following defines a rootkit?
A)It is the act of fraudulently using email to try to get the recipient to reveal personal data by sending legitimate-looking emails urging the recipient to take action to avoid a negative consequence or to receive a reward.
B)It is the unintended release of sensitive data by unauthorized individuals.
C)It is the abuse of email systems to send unsolicited email to large numbers of people.
D)It is a set of programs that enables its user to gain administrator-level access to a computer without the end user's consent or knowledge.

Accepted Answer

A rootkit is a specific type of malware that is designed to provide the attacker with administrator-level access to a computer without the user's knowledge or consent. This allows the attacker to run programs, modify system settings, and generally control the computer at will. Rootkits are often used by attackers as a means of maintaining access to a compromised system, even after other security measures have been put in place.

Question 11

The _____ code of a rootkit gets the rootkit installation started and can be activated by clicking on a link to a malicious Web site in an email or opening an infected PDF file.
A)dropper
B)loader
C)linker
D)adapter

Accepted Answer

The dropper code is what facilitates the installation of the rootkit and can be activated in a variety of ways, including through a malicious Web site or infected PDF. The loader code would typically come after the dropper and would be used to actually load the rootkit into memory. Linker and adapter are not typically associated with rootkits.

Question 12

Jack was shocked to witness the sudden drop in performance of his laptop.He also found that the screen saver constant changed and that the taskbar had disappeared.The given problems are symptoms of _____ infections.
A)rootkit
B)smishing
C)phishing
D)bootkit

Accepted Answer

The sudden drop in performance, changes in screen saver and disappearance of taskbar are all symptoms of a potential rootkit infection. Rootkits are malicious software that can conceal their presence from the operating system and can enable attackers to gain privileged access to the infected system.

Question 13

Andrew,a writer,noticed that his blog was filled with repetitive advertisements and surveys that prevented him from accessing his blog and editing an article.Which of the following has caused this problem?
A)A rootkit
B)A distributed denial-of-service attack
C)A logic bomb attack
D)A cyberespionage incident

Accepted Answer

A distributed denial-of-service (DDoS) attack is a type of cyber attack where multiple systems flood a targeted website or server with traffic, making it difficult or impossible to access. This can be used to disrupt the normal functioning of a website or prevent access to it altogether. The repetitive advertisements and surveys on Andrew's blog may be a result of this type of attack. A rootkit (A) is a type of malware that allows an attacker to access a computer system while hiding their presence. A logic bomb attack (C) involves the insertion of malicious code that executes at a specific time or condition, causing damage to a system. A cyberespionage incident (D) involves the theft of sensitive information from a targeted organization or individual. None of these options seem to fit the scenario described in the question.

Question 14

David,a software engineer,was creating a report using Microsoft Word.After completing 15 pages in the file,he noticed that whenever he copied something using the keyboard,the contents were modified with unwanted numbers and phrases.Which of the following could have caused this problem?
A)A worm
B)Smishing
C)A logic bomb
D)Phishing

Accepted Answer

The problem described indicates that there is a logical error in the software or system being used, which is consistent with a logic bomb. A logic bomb is a type of malware that is designed to execute when specific conditions are met, such as a certain date or time, and can cause deliberate harm to the system or data within it. It is not likely that a worm, smishing, or phishing attack would cause the specific issue that David is experiencing.

Question 15

Which of the following is true of spam?
A)Spam is a type of attack with which a hacker takes over computers via the Internet and causes them to flood a target site with demands for data and other small tasks.
B)Spam is a program in which malicious code is hidden inside a seemingly harmless program.
C)Spam is a set of programs that enables its user to gain administrator-level access to a computer without the end user's consent or knowledge.
D)Spam is an extremely inexpensive method of marketing used by many legitimate organizations.

Accepted Answer

Spam is an extremely inexpensive method of marketing used by many legitimate organizations.

Question 16

Which of the following statements is true of the Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM)Act?
A)It legalizes spamming with certain restrictions.
B)It provides a solution to tackle a Trojan horse.
C)It identifies distributed denial-of-service attacks.
D)It prevents worms by eliminating their ability to replicate.

Accepted Answer

The CAN-SPAM Act regulates spamming by requiring that all commercial emails have an opt-out mechanism, a valid physical address, and a truthful subject line. However, it does not completely outlaw spamming, meaning that it legalizes spamming with certain restrictions. The other statements are not related to the CAN-SPAM Act.

Question 17

Which of the following terms is used to describe a large group of computers controlled from one or more remote locations by hackers without the knowledge of their owners?
A)Spear-phishing
B)Botnet
C)Cyberespionage
D)Smishing

Accepted Answer

Botnet is a term used to describe a large group of computers controlled by hackers without the knowledge of their owners. The hackers use these computers to carry out cyber attacks or scams. Spear-phishing is a type of targeted phishing attack, cyberespionage is the theft of sensitive data through hacking, and smishing is a type of phishing attack carried out through text messages.

Question 18

_____ is the act of fraudulently using email to try to get the recipient to reveal personal data.
A)Spoofing
B)Vishing
C)Phishing
D)Smishing

Accepted Answer

Phishing is the act of using fraudulent emails to trick the recipient into revealing personal information. Spoofing involves disguising the sender's identity to make a message appear to come from a different source. Vishing is a similar scam, but it uses phone calls instead of emails. Smishing involves using text messages to carry out a similar scam. While all these methods can be used to try to obtain personal information, phishing is specifically associated with fraudulent emails.

Question 19

A(n)_____ is a network attack in which an intruder gains access to a network and stays undetected with the intention of stealing data.
A)advanced persistent threat
B)vishing scam
C)identity threat
D)data breach

Accepted Answer

An advanced persistent threat (APT) is a type of network attack where an intruder gains access to a network and remains undetected for an extended period while stealing data. This type of attack is aimed at high-value targets like governments, organizations, or businesses. A data breach could also be a result of an APT attack. Vishing scams and identity threats are different types of attacks that do not necessarily involve gaining access to a network.

Question 20

A _____ is used by attackers to execute files,access logs,monitor user activity,and change a computer's configuration.
A)scareware
B)patch
C)rootkit
D)worm

Accepted Answer

A rootkit is a type of malware that can give an attacker remote access to a victim's computer, allowing them to execute files, access logs, monitor user activity, and make changes to the system configuration. Scareware is a type of malware that tricks users into thinking their computer is infected in order to sell them fake anti-virus software. A patch is a software update that fixes a vulnerability or bug. A worm is a self-replicating malware program that spreads through a network. None of these choices fit the description of the attack tool mentioned in the question.

Quiz 11: Cybercrime and It Security

Which of the following is used to ensure that only humans obtain free email accounts?

Which of the following best describes spear-phishing?

Botnet computers are also called _____.

_____ is the abuse of email systems to send unsolicited email to large numbers of people.

Identify a true statement about smishing.

Identify the attack in which a malicious hacker floods a target site with demands for data and other small tasks.

Identify the mode of message transmission used in vishing.

Identify a true statement about Trojan horses.

Identify the mode of message transmission used in smishing.

Which of the following defines a rootkit?

The _____ code of a rootkit gets the rootkit installation started and can be activated by clicking on a link to a malicious Web site in an email or opening an infected PDF file.

Jack was shocked to witness the sudden drop in performance of his laptop.He also found that the screen saver constant changed and that the taskbar had disappeared.The given problems are symptoms of _____ infections.

Andrew,a writer,noticed that his blog was filled with repetitive advertisements and surveys that prevented him from accessing his blog and editing an article.Which of the following has caused this problem?

David,a software engineer,was creating a report using Microsoft Word.After completing 15 pages in the file,he noticed that whenever he copied something using the keyboard,the contents were modified with unwanted numbers and phrases.Which of the following could have caused this problem?

Which of the following is true of spam?

Which of the following statements is true of the Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act?

Which of the following terms is used to describe a large group of computers controlled from one or more remote locations by hackers without the knowledge of their owners?

_____ is the act of fraudulently using email to try to get the recipient to reveal personal data.

A(n) _____ is a network attack in which an intruder gains access to a network and stays undetected with the intention of stealing data.

A _____ is used by attackers to execute files,access logs,monitor user activity,and change a computer's configuration.