SEC FUND CHAPTER 1

Jake hack a website to promote a political statement what is Jake in this scenario

This is a multi-year intrusion campaign that targets highly sensitive economic/proprietary national security information

what is the Attack Vector in the scenario

What is this a picture of

These are standards that all companies that process, store, or transmit credit/debit card information must follow

Bob was going to ride his bike, but he knew their is a risk that he will fall off so he put on a helmet.

Bob saw that the DS was checking for contraband so he puts it in his friends pocket so he would not get in trouble.

A situation that involves exposure to some type of danger.

A Script Kiddie is an individual who wants to attack computers and has the knowledge and expertise to do so.

These individuals launch an attack against an opponents system to steal classified information

Because of this LAW Jim's Bank has to send him updates about the policies

This is an attacker who uses ideological reasons as a basis for an attack

If security increases convenience also increase

Jessie stole Julie's info's and started pretending to be her what did Jessie commit?

What is Cyber terrorism not designed to do?

Bob the risk of going down the hill and breaking a bone was to high so he decided not to do it. What example is this of?

Bob knew he was not going to make the team so he didn't practice what risk response is this an example of

Simplicity is described as making a secure system simple from the outside but complex from the inside.

Sue knows that her credit card information used on Amazon.com will be kept secure. Which protection is she trusting in?

What is the fence hole in the scenario

This is the act of stealing another person's information such as their social security number.

A series of irregular accounting procedures caused Enron Corporation to declare bankruptcy. What law protection is this?

Information Security does all except

Confidentiality is to ensure only the approved individuals have access to the information.

A vulnerability is a flaw or weakness that allows a threat or agent to bypass security.

A Threat Vector is a flaw or weakness that allows a threat or agent to bypass security

John makes his layers different so it is harder for the hacker to breach what security fundamental was used?

This is defined as reducing the threat against information by ensuring only those who must use data are granted access.

Alex was able to hack jenny computer even though Alex is not good at hacking he used an automated software called what?

Paul found a vulnerability instead of telling the company he sold it to a government what is Paul in this scenario

Daenerys is an admin for google.com. She uses proxy servers and NAT to hide her IP address. This protection falls under?

This act requires banks/financial institutions to alert customers of their policies and practices

Pizza hut saw that Papa John's had a secret sauce so they hack their systems to steal the information what is Pizza hut?

An attacker tries to take down a water plant. He chose this target because it will cause panic. What type of attacker?

These form the security around the data. (i.e. door locks, network security equipment)

This is an item that has value (House, Car, Software, Info contained on a computer)

What is the Thief in the scenario

These are the 4 Risk Response Techniques

Bob was trying to increase his security by making the inside simple, but the outside complex. What fundamental is used

Bob is a Doctor and revealed his patients info what law did Bob break.

The following are the 3 types of Information Protection

This is an attacker commissioned by the government to attack enemy information systems.

This is the act of stealing proprietary business information

Diversity is described as making each layer different to ensure that breaching 1 layer does not compromise whole system

This term best describes automated hacking software (scripts) downloaded from websites that are used by Script Kiddies

Layering is also called the Defense-in-Depth approach and is provides the most comprehensive protection

To accept risk is to acknowledge that it is there but take no steps to address

what is the risk in the scenario

Widespread Vulnerability, Configuration Issues, Poorly Designed Software, and Hardware Limitations are reasons for?

This is a premeditated/politically motivated attack designed to cause panic, provoke violence, and financial catastrophe