What is a script kiddie? (***Choose two***)

Threat actor that runs attack scripts created by others, Threat actor that runs scripts for investigative purposes

What is a DDoS attack in Cyber Security

Attack on a server or network to disrupt normal operations

WHAT ARE THE TYPES OF MALWARE?

Worm,ransomware,rogueware,trojan,virus, and spyware

email sent directly to a user that he responded to earlier

What is a hacktivist? ***(Choose two)****

Threat actor that attacks based on some form of cause (e.G) political), Threat actor that leads online rallies

What is an insider threat?

Threat actor is a trusted employee with issues with the organization.

What is a Brute Force attack in Cyber Security

Trying all possible combos & permutations until the right guess works

Hacking or spamming email to make people go to certain websites.

Which of the following statements describes Penetration Testing? (Select all that apply)

Authorized simulated attack to exploit found vulnerabilities of a network

What is whale phishing?

A phishing attack that is aimed at wealthy, powerful people

What's the MAIN difference between penetration testing and vulnerability scanning?

one finds vulnerabilities, the other exploits them

What is a Man in the Middle attack in Cyber Security

redirecting network traffic through ARP poisoning

studbud

CYBSECII M4-IDING THREATS,ATTACKS,EXPLOITS,TARGETS

21 termsStudBud Administration136 plays

CYBERSECURITY II MODULE 4 QUIZ PREP: IDING THREATS, ATTACKS, EXPLOITS, & TARGETS

Flashcards21 cardsFPractice quizPHost liveL

Questions 21

Answers

1
What is a script kiddie? (***Choose two***)
Threat actor that runs attack scripts created by others
Threat actor that has deep technical knowledge about attack scripts
Threat actor that runs scripts for investigative purposes
Threat actor that runs attack scripts they created themselves
2
Which of these groups exploits cyber vulnerabilities?
ALL
Hacktivists
Criminals
Governments
3
What is a DDoS attack in Cyber Security
Using a logarithmic algorithm to reduce the # of guesses
Attack on a server or network to disrupt normal operations
randomly guessing based on probability for the right answer
Trying all possible combos & permutations until the right guess works
4
WHAT ARE THE TYPES OF MALWARE?
Malware doesn't exist
Worm,ransomware,rogueware,trojan,virus, and spyware
Worm,trojan,cracker,spyware,phising,spam
Malware doesn't have types
5
Which is not a vulnerability scanning technique?
Not Penetration Testing
passively testing security controls / false positives
Bypass security controls
identify lack of security controls and vulnerabilities
6
Why do we do Penetration testing?
Test weak spots in a network
Find out how strong a wall is
Test where to download stuff onto a Computer
Test the thickness and defense of armor plating
7
Spear phishing is
email sent directly to a user that he responded to earlier
An email sent to a secure group with a great offer
an email sent to an entire organization with a great deal
an email sent to a CISO for a record conformation from HR
8
What is a hacktivist? ***(Choose two)****
Threat actor that attacks based on some form of cause (e.G) political)
Threat actor that attacks based on major sporting events
Threat actor that leads online rallies
Threat actor that posts blogs about political events
9
What is an insider threat?
Threat actor is not an employee.
Threat actor is a trusted employee with issues with the organization.
Threat actor that works as a trusted employee, but has no issues with org.
Threat actor is a trusted manager with issues managing.
10
What does WPS stand for?
Wireless Party Set up
Wi-Fi Protected Set up
Wireless Privacy Set up
None of the above
11
What is a Brute Force attack in Cyber Security
randomly guessing based on probability for the right answer
Physically breaking into a secure repository to steal information
Trying all possible combos & permutations until the right guess works
Using a logarithmic algorithm to reduce the # of guesses
12
What is Phishing?
An attempt to steal phishing poles.
A typo.
Hacking or spamming email to make people go to certain websites.
When you go to a pond to catch some fish.
13
Name a vulnerability an attacker can still exploit with a perfect security system & security best practices.
User Trust
User Emails
User Accounts
User Drivers
14
Which of the following statements describes Penetration Testing? (Select all that apply)
increasing vulnerabilities
Authorized simulated attack to exploit found vulnerabilities of a network
Looking at a network activity log
Defending against an attack
15
Which of the following is not a cyber threat actor?
Kittens
Nation State
Insider Threat
Terrorist Group
16
What is whale phishing?
An over-sized whale
Sending emails to the President
A phishing attack that is aimed at wealthy, powerful people
Fishing for Blue Whales
17
Cyber Terrorism targets what?
All of the above
Government operations
transportation infrastructure
Energy infrastucture
18
Which of the following are threats to cyber security?
Social engineering
All of the above
Botnet attacks
DDoS attacks
19
What's the MAIN difference between penetration testing and vulnerability scanning?
Power of magic
Technical tools
No diff.. Let's call pentests vulnerability scanners
one finds vulnerabilities, the other exploits them
20
What is a Man in the Middle attack in Cyber Security
redirecting network traffic through ARP poisoning
Using a logarithmic algorithm to reduce the # of guesses
Attack on a server or network to disrupt normal operations
Trying all possible combos & permutations until the right guess works
21
What is one characteristic of an organized cyber-crime group?
Diversity of backgrounds
Run by anti-government individuals only
Have a lot of funding
Operate based on a schedule

CYBSECII M4-IDING THREATS,ATTACKS,EXPLOITS,TARGETS Flashcards | StudBud