Question 1

​Blacklist and header filtering is usually performed by email clients and Webmail services.

Accepted Answer

Blacklist and header filtering is usually performed by email servers or spam filters, not by email clients or Webmail services.

Question 2

​___________ is a term describing spam that uses a false pretext to trick victims into participating.

Accepted Answer

The answer of ​___________ is a term describing spam that...

Question 3

​ IMSI catchers are operated by cellular service companies.

Accepted Answer

IMSI catchers are not operated by cellular service companies but rather by government agencies, law enforcement or intelligence agencies.

Question 4

​Spam accounts for approximately ______ of all email.
A)​40%
B)​50%
C)​60%
D)​70%

Accepted Answer

Spam accounts for approximately 70% of all email, indicating the vast amount of unsolicited and often irrelevant messages sent over the email system.

Question 5

​Most ISPs and email services do not use filtering techniques to block spam.

Accepted Answer

Most ISPs and email services use filtering techniques to block spam, such as content filtering, blacklists and whitelists, and sender reputation systems.

Question 6

​Social engineering attacks prey on human vulnerabilities.

Accepted Answer

Social engineering attacks exploit human emotions, trust, and curiosity to trick individuals into divulging sensitive information or performing actions that benefit the attacker.

Question 7

​Most mass-mailing databases are legitimately compiled from customer lists.

Accepted Answer

The answer of ​Most mass-mailing databases are legitimately compiled from...

Question 8

​Which of the following is not a type of spam filter?
A)​Content
B)​Permission
C)​Blacklist
D)​Entropy

Accepted Answer

Content, Permission, and Blacklist are all types of spam filters commonly used to filter out unwanted emails. Entropy is not a type of spam filter, but rather a measure of randomness in a system.

Question 9

​________ is an email scam that masquerades as a message from a legitimate source.

Accepted Answer

The answer of ​________ is an email scam that masquerades...

Question 10

​A social engineering scam called ___________ is when a victim is promised a large sum of money in exchange for a bank account number from which a small advance fee is withdrawn.
A)​advance fee fraud
B)​pharming
C)​address spoofing
D)​Evil Twin

Accepted Answer

The scenario described is a textbook case of advance fee fraud, also known as a "419 scam" after the relevant section of the Nigerian criminal code. The victim is promised a large sum of money (usually allegedly held overseas) and asked to provide banking information to facilitate the transfer. However, before that transfer can take place, the scammers will demand an advance fee for various reasons (e.g. taxes, bribes, legal fees). After payment is made, the scammers disappear and the victim never receives the promised windfall.

Question 11

​______________ is a deceptive practice that exploits human psychology by inducing victims to interact with a digital device in a way that is not in their best interest.
A)​Evil Twin
B)​Address spoofing
C)​Social engineering
D)​None of the above

Accepted Answer

The given description matches the definition of social engineering, which involves using deception to manipulate individuals into divulging sensitive information or performing certain actions that may harm them or their organization. Evil twin refers to a type of Wi-Fi attack, while address spoofing involves forging the source address in network packets. Therefore, options A and B are incorrect. Option D is not a valid answer as a correct option exists.

Question 12

​________ is a 64-bit number that uniquely identifies a cellular device.

Accepted Answer

The answer of ​________ is a 64-bit number that uniquely...

Question 13

​_________ redirects Web site traffic to fraudulent Web sites.

Accepted Answer

The answer of ​_________ redirects Web site traffic to fraudulent...

Question 14

​____________ is a term for a person who devises and carries out a scam in order to accomplish a goal.
A)​Main-in-the-middle
B)​RAT
C)​Internet worm
D)​none of the above

Accepted Answer

The options provided do not match the definition provided for a person who devises and carries out a scam. "Man-in-the-middle" refers to a type of attack where a third party intercepts communication between two parties. "RAT" stands for "Remote Access Trojan," which is a type of malware used to gain unauthorized access to a computer system. "Internet worm" is a self-replicating malware that spreads through a network by exploiting vulnerabilities. Therefore, none of the provided options accurately describe a person who carries out a scam.

Question 15

​The current method of encrypting communication between a client and a server depends on a security protocol called _______.
A)​RAT
B)​TLS
C)​PUP
D)​AES

Accepted Answer

The current method of encrypting communication between a client and a server depends on Transport Layer Security (TLS). RAT, PUP, and AES are not security protocols used for encrypting communication.

Question 16

​A spam __________ uses a set of rules to examine email messages and determine which are spam.

Accepted Answer

The answer of ​A spam __________ uses a set of...

Question 17

​__________ is defined as unsolicited messages that are usually sent in massive numbers using electronic mail systems.

Accepted Answer

The answer of ​__________ is defined as unsolicited messages that...

Question 18

​Spam sent by scammers often uses spoofed email addresses.

Accepted Answer

Scammers often use fake or spoofed email addresses to avoid detection and make it harder to trace back to them.

Question 19

If a hacker intercepts encrypted data by way of a MITM attack, the contents of that data is not always secure.​

Accepted Answer

A hacker who intercepts encrypted data through a man-in-the-middle (MITM) attack can attempt to decrypt the data using various methods such as brute force attacks or exploiting vulnerabilities in the encryption algorithm. Therefore, the contents of the data may not always be secure.

Question 20

​The CAN-SPAM Act is considered an effective means of controlling the volume of spam on the Internet.

Accepted Answer

The CAN-SPAM Act, while it sets rules for commercial email, has been criticized for not significantly reducing the volume of spam on the Internet, as spammers often find ways to bypass regulations or operate from jurisdictions outside the reach of U.S. law.

Quiz 7: Digital Security

​Blacklist and header filtering is usually performed by email clients and Webmail services.

​___________ is a term describing spam that uses a false pretext to trick victims into participating.

​ IMSI catchers are operated by cellular service companies.

​Spam accounts for approximately ______ of all email.

​Most ISPs and email services do not use filtering techniques to block spam.

​Social engineering attacks prey on human vulnerabilities.

​Most mass-mailing databases are legitimately compiled from customer lists.

​Which of the following is not a type of spam filter?

​________ is an email scam that masquerades as a message from a legitimate source.

​A social engineering scam called ___________ is when a victim is promised a large sum of money in exchange for a bank account number from which a small advance fee is withdrawn.

​______________ is a deceptive practice that exploits human psychology by inducing victims to interact with a digital device in a way that is not in their best interest.

​________ is a 64-bit number that uniquely identifies a cellular device.

​_________ redirects Web site traffic to fraudulent Web sites.

​____________ is a term for a person who devises and carries out a scam in order to accomplish a goal.

​The current method of encrypting communication between a client and a server depends on a security protocol called _______.

​A spam __________ uses a set of rules to examine email messages and determine which are spam.

​__________ is defined as unsolicited messages that are usually sent in massive numbers using electronic mail systems.

​Spam sent by scammers often uses spoofed email addresses.

If a hacker intercepts encrypted data by way of a MITM attack, the contents of that data is not always secure.​

​The CAN-SPAM Act is considered an effective means of controlling the volume of spam on the Internet.

Blacklist and header filtering is usually performed by email clients and Webmail services.

___________ is a term describing spam that uses a false pretext to trick victims into participating.

IMSI catchers are operated by cellular service companies.

Spam accounts for approximately ______ of all email.

Most ISPs and email services do not use filtering techniques to block spam.

Social engineering attacks prey on human vulnerabilities.

Most mass-mailing databases are legitimately compiled from customer lists.

Which of the following is not a type of spam filter?

________ is an email scam that masquerades as a message from a legitimate source.

A social engineering scam called ___________ is when a victim is promised a large sum of money in exchange for a bank account number from which a small advance fee is withdrawn.

______________ is a deceptive practice that exploits human psychology by inducing victims to interact with a digital device in a way that is not in their best interest.

________ is a 64-bit number that uniquely identifies a cellular device.

_________ redirects Web site traffic to fraudulent Web sites.

____________ is a term for a person who devises and carries out a scam in order to accomplish a goal.

The current method of encrypting communication between a client and a server depends on a security protocol called _______.

A spam __________ uses a set of rules to examine email messages and determine which are spam.

__________ is defined as unsolicited messages that are usually sent in massive numbers using electronic mail systems.

Spam sent by scammers often uses spoofed email addresses.

If a hacker intercepts encrypted data by way of a MITM attack, the contents of that data is not always secure.

The CAN-SPAM Act is considered an effective means of controlling the volume of spam on the Internet.