When using a rainbow attack...

You run a hash against precomputed hashes

using impersenation to obtain private infomration

What is a Distributed Denial of Service (DDoS) attack? An attempt...

to crash a server by spamming it with many requests

ordered operations are disrupted or altered by an exploit

What should you do to completely remove a rootkit from a computer?

Reformat the hard drive and reinstall the operating system.

Helps bypass normal authentication and security mechanisms

Hardware vulnerabilities...

are often introduced by hardware design flaws. RAM memory for example, is..

Password spraying …

attacks many user accounts with one password

encrypts files on a computer and demands payment

Malware that restricts access and demands a ransom be paid

Software designed to gain administrative level control

What is the primary goal of social engineering attacks?

To manipulate people into revealing confidential information

in which data goes past the boundary of its assigned memory buffer

Alters search engine results with what could be malicious websites

Software vulnerabilities?

usually introduced by errors in the operating system or application code

When using a rainbow attack...

You run a hash against precomputed hashes

A group of compromised computers

An exhaustive search that uses guess and check

Intrude into an existing connection between systems

Pops up ads off what it learned spying on the user

One of the most advertised benefits of Cryptocurrencies is also its biggest complaint by governments, which is...

It is harder for police to track illegal money and purchases

Trying to crack a password by trying a library of passwords.

May occur when multiple threads/processes read and write some common data

dictionary attack ___

Uses common words or password lists

For pretexting to be effective, what does the attacker have to do?

Establish legitimacy with the victim

Advanced Persistent Threat (APT)

a secret, long term attack against nations, businesses, or politicians

Malicious software that pushes a specific search result to the top of lists

Social engineering is where you...

Trick someone into giving you confidential data.

What is Social Engineering?

Practice of tricking people into giving private info

in which data goes past the boundary of its assigned memory buffer

the hacker secretly intercepts and alerts the communication between 2 parts

applies every possible key to decrypt until one works

Hardware vulnerabilities

often introduced by hardware design flaws.

A Trojan Horse is designed to:

bypass security and create a backdoor for hackers on your pc

Intended to bombard a server with requests to get it down, Intended to bombard a website with requests to get it down

Advanced Persistent Threat (APT)

is a multi-year intrusion campaign that targets highly sensitive info

studbud

intro cyber mod 2

52 termsStudBud Administration10 plays

Imported from external platform

Flashcards52 cardsFPractice quizPHost liveL

Questions 52

Answers

1
When using a rainbow attack...
You run a hash against a plaint-text word list
You run a hash against precomputed hashes
You try random digits until something works
You look up the password in a dictionary
2
What can be used to prevent tailgating?
Proximity Card
Mantrap
Camera
Cipher Lock
3
Pretexting
using voicemail to obtain private infomration
using text to obtain private infomration
using shoulder surfing to obtain private infomration
using impersenation to obtain private infomration
4
What is a Distributed Denial of Service (DDoS) attack? An attempt...
by users to deny service to others by petition
by gov't to deny Internet access to its citizens
by users to access private info stored in a private database
to crash a server by spamming it with many requests
5
Spyware gains access to your computer files by:
all of the above
downloading software from the internet
clicking on a link in a pop-up
installing a browser add-on
6
Trojan Horses...
...do not need to attach to a program
...a type of social engineering
...need to attach to a program
...designed to mislead users and prompt downloading of it
7
What is not a common use of botnets?
network troubleshooting
Clickfraud
DDoS
computer virus infections
8
Two types of social engineering are...
Philling and Pharming
Phishing and philling
Shoulding and Phishing
Shouldering and Selling
9
race conditions
ordered operations are disrupted or altered by an exploit
malware designed to track the actions of users and capture data
10
Which can be used in a DoS/DDoS?
XSS
buffer overflow
watering-hole
botnet
11
What should you do to completely remove a rootkit from a computer?
Flash the ROM BIOS.
Reformat the hard drive and reinstall the operating system.
Erase and reinstall all files in the WINDOWS folder.
Expand the Master Boot Record.
12
What is password spraying?
Overwhelming system
Trying common passwords
Monitoring activity
Stealing data
13
What are backdoors?
The act of exploiting a bug or design flaw in a software
Helps bypass normal authentication and security mechanisms
Codes to back up your computer
Trojans set off on a certain date
14
Hardware vulnerabilities...
an exploit was created by repeatedly rewriting memory in the same...
vulnerability occurs when data is written beyond the limits of a buffer...
are any kind of software or hardware defect. After gaining knowledge of a..
are often introduced by hardware design flaws. RAM memory for example, is..
15
Password spraying …
is less permanent than paint spraying
creates a mess
attacks many user accounts with one password
attacks one user account with multiple passwords
16
Ransomware....?
is used to carry out DoS
modifies files to give users a backdoor
encrypts files on a computer and demands payment
are a brute force attack
17
What is Ransomware?
Individual compromised computers in the botnet
Malware that restricts access and demands a ransom be paid
A platonic extra that was added to an OS as a joke
Describes applications behaving improperly
18
What is Rootkit?
Code that runs on a users computer without their knowledge
A group of compromised computers
Software designed to gain administrative level control
Abuse of electronic messaging systems
19
What is the primary goal of social engineering attacks?
To intercept network traffic
To manipulate people into revealing confidential information
To install malware on computer systems
To create denial of service attacks
20
What is a clue your computer may have been infected with spyware?
pop-up ads appear
shutting down
slow response
asking for updates
21
Buffer Overflow
code attempts to remove the relationship between a pointer and pointee
occur when software does not free up its allocated memory when it is done
Windows-based app attempts to force another running app to load something
in which data goes past the boundary of its assigned memory buffer
22
SEO Poisoning
Alters search engine results with what could be malicious websites
Filters MAC addresses and poisons the address
Poisons the DNS of the network to change webresults
Switches HTTP and HTTPS results
23
What does the first D in DDos stand for?
Distributed
Duplicated
Dedicated
Devestating
24
Software vulnerabilities?
usually introduced by errors in the operating system or application code
pecific to device models and are not generally exploited
Based on that design flaw, an exploit called Rowhammer was created./
often introduced by hardware design flaws
25
What is the term used for an attacker who controls multiple zombies in a botnet?
zombie shepherd
rouge IRC
bot herder
cyber-robot
26
Man in the middle
MiTM
MTM
MinT
MILK
27
Advanced persistent Threat (APT) Detection Methods
Loggers
Log collectors
Audit
Foorprint
28
When using a rainbow attack...
You try random digits until something works
You run a hash against a plaint-text word list
You run a hash against precomputed hashes
You look up the password in a dictionary
29
What is a botnet?
A group of compromised computers
a helpful type of software
Malware that restricts access to computer files
Similar to a virus but it self replicates
30
Brute-force
An exhaustive search that uses guess and check
Animalistic strength or purpose, or "heavy"
Poorly optimized algorithm that uses more electricity to run
Weaponized algorithm that will overload a given server, DDOS
31
The term Malware includes viruses, worms, trojan horses, spyware, adware, ransomware and other malicious software.
False
True
32
Man-in-the-Middle
When a man stands in between two ladies
Intrude into an existing connection between systems
Utilizes a vulnerability in encrypted compression
Requires a trojan horse
33
What is adware?
Applications behaving improperly without consequence
Pops up ads off what it learned spying on the user
Malicious software downloaded from a site or gets installed
Malware that demands a ransom be paid
34
One of the most advertised benefits of Cryptocurrencies is also its biggest complaint by governments, which is...
It is easier for citizens to use cashless payment apps
It is harder for police to track illegal money and purchases
It is more difficult for governments to translate currencies exchange
It is difficult to explain what a blockchain is
35
Dictionary Attack
Recording someone typing in their password.
Cracking a password by attempting every character combination one by one.
Pretending to be someone you aren't to steal passwords or credit cards.
Trying to crack a password by trying a library of passwords.
36
Race conditions
Are easy to debug
May occur when multiple threads/processes read and write some common data
Occur when threads access read-only data
Are only applicable to threads
37
dictionary attack ___
Uses user info to guess passwords
None of the above
Uses common words or password lists
Tries all possible combinations
38
For pretexting to be effective, what does the attacker have to do?
Establish legitimacy with the victim
Know about networking
Own a telephone
Take an improvization class
39
Advanced Persistent Threat (APT)
a secret, long term attack against nations, businesses, or politicians
malware that takes control of a device to steal sensitive information
40
SEO poisoning
Drive-by downloads a batchfile that runs an exe for a RAT backdoor
Malicious software that pushes a specific search result to the top of lists
Adds you to a botnet and pings a C2 server
41
Social engineering is where you...
Make a piece of software to access someone's computer.
Trick someone into giving you confidential data.
Gain access to someone's account via threats.
Keep in touch on Facebook.
42
Cryptojacking is the attempt by what two crimes to access and use your personal information?
Piracy and Phishing
Hacking and Phishing
None of these
Hacking and Piracy
43
What is Social Engineering?
Send email with intent to get user to reveal personal info
Malicious software that loads itself before OS completes
Infestation that disguises itself as a useful program
Practice of tricking people into giving private info
44
Buffer Overflow
in which data goes past the boundary of its assigned memory buffer
code attempts to remove the relationship between a pointer and pointee
occur when software does not free up its allocated memory when it is done
Windows-based app attempts to force another running app to load something
45
man in the middle
the hacker secretly intercepts and alerts the communication between 2 parts
A weakness which can be exploited by a threat actor, such as an attacker.
A collection of malicious software tools that enable unauthorized access.
The process of converting data into a code to prevent unauthorized access.
46
Brute force
applies every possible key to decrypt until one works
uses keylogging data
Attacks forcefully once and is usually successful
uses a consistent alphabet shift pattern
47
Hardware vulnerabilities
often introduced by hardware design flaws.
introduced into the system when an altered IOS
verify the integrity of the downloaded IOS image
48
A Trojan Horse is designed to:
destroy the boot files on your hard drive
replicate itself and spread through all the files on your pc
make your computer run very slowly
bypass security and create a backdoor for hackers on your pc
49
What does a DDos do?
Intended to bombard a server with requests to get it down
Intended to bombard Github with requests to get it down
Intended to bombard facebook with requests to get it down
Intended to bombard a website with requests to get it down
50
A piece of software designed to update a computer program to fix a software vulnerability
Update
DDoS
Installation
Software Patch
51
Advanced Persistent Threat (APT)
information that is only able to be accessed by people who have authority
is a multi-year intrusion campaign that targets highly sensitive info
only people who are approved can gain access to certain information
is a situation that involves exposure to any type of danger
52
What is a pretexting?
Remotely access or control a computer system
tricking a victim into giving you there personal information
Looking over someone’s shoulder as they put in password
When a cyber-criminal lies to get data and information

intro cyber mod 2 Flashcards | StudBud