Introduction to Cybersecurity: Module 7 Offensive Security

Criminals who break into computer networks with malicious intent.

The practice of making phone calls purporting to be reputable to induce individuals to reveal information.

The process of gathering information about a target.

In the cyber kill chain harvesting email addresses and conference information is a form of:

In the Kill Chain, sending a weaponized bundle to the victim via email, web, USB etc.

_________s maintain overall system security, preventing security breaches, monitoring potential threats, and research

Vulnerability assessments may be included in a penetration tester’s toolkit, but are not generally a pentest.

Adversarial Tactics, Techniques & Common Knowledge.

The practice of sending text messages purporting to be reputable to induce individuals to reveal information.

A model identifies what the adversaries must complete in order to achieve their objective.

In the cyber kill chain remote manipulation of the victim :

An organization’s ______ is responsible for testing the efficacy and resilience of an organization’s security framework.

In the cyber kill chain coupling exploit with a backdoor into the deliverable payload.

The ATT&CK framework assumes an attack will occur and looks at the issue from the attacker’s perspective

Which is not a social engineering tactic.

Ethical hacking refers to using attacker TTPs to help secure organizational infrastructure and data.

Practitioners may conduct pentest activities without explicit permission to discover vulnerabilities.

In the Kill Chain, using a vulnerability to execute code on a victim's system

Choose all the features of Penetration Testing:

In the Kill Chain, installing malware on the asset

In the Kill Chain, hands on keyboard access, intruders accomplish their original goals

Technically preparing for an attack: Tuning, modifying, and creating tools-based reconnaissance.

The practice of sending emails purporting to be reputable to induce individuals to reveal information.

Deceiving an individual into revealing sensitive info by associating with the individual to gain confidence and trust

The practice of sending emails purporting to be reputable to induce targeted individuals to reveal information.