IST 254: Chps 3&4 Review

What is an attack on a NoSQL database compromised by data manipulation when the input is not sanitized by the app?

An attack that takes advantage of a website that accepts user input without validating it.

A secure cookie is a cookie that is only sent to the server with an encrypted request over the secure HTTPS protocol.

Which of the following is a broad term used for cybersecurity risks in (AI) and (ML)?

Which of the following is a coding technique wherein an app is written so its functionality is difficult to understand

Which of the following is the target of an attacker in a server-side request forgery (SSRF)?

TAXII is A language and format used to exchange cyberthreat intelligence.

attack captures the data sent between the users by snooping and copying the data and using it for malicious activities.

------Disguises itself as legitimate software but usually delivers a harmful payload

Which of the following boot security modes provides the highest degree of security?

Malicious program that uses a computer network to replicate.

What type of attack occurs when meeting-scheduling software secretly tracks other applications?

What is another term for a worm?

At any given time, data can be in one of the three stages except

-----is specific to the local system and is designed to prevent attacks at the host level. 

Which of the following requires a carrier to be infected with a file-based virus?

What software assurance tool is used for static analysis of Java code?

Carol installed a free AVI-to-MPEG converter. After, unwanted apps began auto-installing. What attack is this?

A structure that sends instructions to infected bot computers

A database that contains low-level settings used by the Windows OS and for those applications that elect to use it is?

Malware that encrypts all the files on the device so that none of them can be opened until a ransom is paid.

Open source is proprietary information owned by an entity that has an exclusive right to it.

An indicator that malicious activity is occurring but is still in the early stages.

------it prevents end-users from copying data from the system onto unapproved mobile devices

Which protocol is used in AIS (Automated Indicator Sharing)?