Quiz 1 Study Guide Draft

Question 1

Cyber incident with worm Agent.BTZ that worked into DoD’s air-gapped secret Internet protocol router network SIPRnet was

Accepted Answer

Buckshot Yankee

Question 2

According to Porsche, which of the following is NOT a factor of authentication

Accepted Answer

somewhere you are (IP Address)

Question 3

Spyware refers to:

Accepted Answer

Malware installs keylogger, spying on everything typed including passwords

Question 4

What is the goal of the network layer in the TCP/IP stack?

Accepted Answer

Move packets across multiple hops from a source to destination computer

Question 5

According to Libicki, which are dangers of thinking in terms 'defending the network' instead of 'ensuring the mission?'

Accepted Answer

Reactive approach will likely fail unless proactive reconnaisance done 1st, Emphasis on dtn prioritzes information assurance over mission assurance, Network management based solely on defense may not be the most effective, Assuring the mission involve acting proactively to limit adversaries option

Question 6

Operation Aurora involved what nation-state hacking Google in order to spy on dissidents within their own country?

Accepted Answer

China

Question 7

Passwords can be captured by: (choose all that apply)

Accepted Answer

Phishing attacks, Packet sniffing

Question 8

who wrote Information Warfare (1998)

Accepted Answer

Edward Waltz

Question 9

Some nuances of cyber arms control contrasted with arms control of WMD include: (choose all that apply)

Accepted Answer

cyberwarfare is assymetrical, cyberweapons are not observable, thus unverifiable

Question 10

Which layer in the TCP/IP stack deals with identifying lost packets and requesting retransmission?

Accepted Answer

transport

Question 11

The US government has introduced a product called “Einstein” to enhance the cyber strength of the US. What is Einstein?

Accepted Answer

An intrusion detection system required to run on government computers

Question 12

The acronym ICS stands for

Accepted Answer

Industrial Control Systems

Question 13

What term is used to describe individuals who simply execute attacks designed by others?

Accepted Answer

script kiddies

Question 14

How could an attacker exploit the Address Resolution Protocol (ARP) to conduct a man-in-the-middle (MITM) attack?

Accepted Answer

putfalseinfo inARPbysendingunsolicitedARP replyassocattackerMACtotargetIP, use software to change the MAC address that the attacking machine reports

Question 15

Cyber exploitation is best defined as

Accepted Answer

non-destructive intelligence gathering activity

Question 16

The switching protocol of the internet is:

Accepted Answer

Packet switching-allow for max amount of info that phys infrastructure can

Question 17

A rootkit is:

Accepted Answer

Malware living in bootup system of device and hides from operating system

Question 18

“Going Dark” is a problem related to proliferation of cheap & effective encryption that led to calls for changes in the

Accepted Answer

FBI

Question 19

The term “Zero Day” refers to:

Accepted Answer

Bad sware vulner. w/ no known fix so cyber defenders had 0 days to prep

Question 20

In the context of cybersecurity the acronym CIA stands for:

Accepted Answer

Confidentiality, Integrity, Accessibility

Quiz 1 Study Guide Draft

Questions 20

Quiz 1 Study Guide Draft

Questions 20