Cyber Surety Threats & Vulnerabilities

Listening to the network traffic, sometimes referred to as sniffing or snooping.

Software designed to replicate itself from one computer to another without human interaction.

What is the appearance of legitimate advertisements for security alerts and updates?

Performs, supervises, manages data, information, and knowledge sharing services in a fixed and expeditionary environment

Which attack involves an individual attempting to gain unauth access of computer resources?

This attack is often called the "man in the middle" attack.

The 1st line of defense to distribution attacks is trusted software development and distribution.

This AFSC deploys and sustains standard voice, data, video network, & cryptographic client devices.

What is the act of maliciously causing damage or vandalism to public/private websites?

This AFSC had the duty to deploy and sustain a video network infrastructure system and IP detection system.

What is the method of taking over a Web user session by obtaining their session ID & then masquerading as auth user.

Four common countermeasures include IDSs, alternate power sources, boundary protection, and antivirus software.

Which virus writes itself to the end of the file?

While people are our greatest asset, they are also the weakest link in any security system.

Which policy helps to control access inside of the network?

A program created to spy on victims.

Overwriting viruses replace the contents of other files with their own code, but allow the computer to continue working.

Which attack involves an unauth user attempting to gain info about a network?

Which virus renames the original file and writes itself with the original file's name?

Which virus infects executable files?

Malicious logic is a program designed to do something without the user's knowledge.

Situational awareness is the decision maker's mental model.

Internal threats include poor building construction.

A collection of hacking tools used to obtained administrator level access to a computer system or network.

Macros are a series of commands and actions that help automate tasks performed on a regular basis.

Countermeasures are actions, devices, procedures, or techniques meeting or opposing a threat.

Which virus infects documents and templates, but not programs?

What is a group of computers connected to the internet having been compromised by a hacker using virus or Trojan

What is considered a circumstance or event that may compromise a system or the data it contains?

What is the probability and severity of loss from the exposure to the hazard?

The Air Force uses an Allow All Model for security.

This AFSC administers server-based network systems

Occurs when attacker steals valid user's session ID to reuse to impersonate as an auth user to perform fraudulent acts

This policy defines access rights and privileges, as well as specify required notification messages.

The 1st line of defense to insider attacks is physical and personnel security.

Which of the 5 RM steps is missing? Identify, assess, implement, supervise and evaluate

Which attack denies access to a system or network by bombarding it with traffic?

Tailgating occurs when someone watches another person type.

Which virus writes itself between file sections of a 32-bit file?

The 1st line of defense for a passive attack is encryption & traffic flow security.

This policy defines what users shall and shall not do on the various components of the system.

This AFSC supervises and performs as a computer analyst.

What is generally described as a weakness?

The 1st line of defense for close-in attacks is physical and personnel security.

An attack that is able to deny transactions, removing any traces of communications having occurred.

Which virus writes itself before the original file?

Software designed to spread from one infected computer to another.

Which virus inserts itself into gaps inside the original file?

This policy specifies audit capacity and provide incident handling guidelines.

Provides C2 capability and has the duty to maintain fixed cable & wireless distribution systems

The 1st line of defense for active attack is to defend the enclave boundaries.

Which class of attack is missing? Passive, active, insider, distributor, and...

Which virus causes infection if the disk is in the drive when the computer starts up?