Cyber Security Midterm Review

The "WannaCry" attack affected all 3 components of the CIA Triad.

The U.S. Government classification of data includes all of the categories below except.  

Data classification is not based on sensitivity. 

Top Secret Data is data that affects national security.   

The CIA triad, describes a model designed to guide policies for information security within an organization.

Who hacked TJX?

What is a firewall?

How many components does the CIA triad have?

Which of the following most accurately describes the Internet of Things.  

Where did David L. Smith Live?

The administrative category of security controls is policy based, and it doesn’t provide guidance.

Multi-factor authentication requires users to present a minimum 5 pieces of data in order to access their information  

How many accounts were compromised by the Sony Play station attack? 

Biometrics are related to the physical aspects of humans  

A phone notification saying, you spent $15 on fortnite? But you never played Fortnite. What Is this?

A person creates a fake copy of your credit card and uses it to buy gas

Passwords should be stored in Cipher text.  

Who was responsible for the Sony Picture Attack?  

Data can be classified as:

Google was affected by the Melissa virus.

Directive control is associated with

The amount of cyber attacks has not increased over the years.

The cyber attack on Estonia was carried out by a group called

Efficiency & Optimization refers to efficient access to data. 

 Exploiting Back Door is either an authorized user or unauthorized user circumventing a system with higher access

Passive attack is easier to prevent then remove.

The lockdown for the NASA cyber attack lasted 21 days.

What is the goal of Social Engineering Attacks?

What was Stuxnet's target?

Main benefits of data classification include all of the benefits below except

If someone logs into your account and slowly starts taking your information it is called.

Distributed denial-of-service (DDoS) attack is a malicious attempt to disrupt network  traffic. 

A passive attack is when a network system is monitored and sometimes scanned for open ports and vulnerability

All Ransomware is Malware

Spoofing is a technique through which a cybercriminal disguises themselves as a known or trusted source.

A firewall an example of compensating control.

Sandworm wasn’t responsible for the Ukrainian attack

All of these of are uses of biometrics except.  

A vulnerability is something that can allow a threat to evolve into an attack.

Having your Credit card number printed on a receipt is a threat?

Hardware keys provide a stronger defense against hackers.  

Data classification includes. 

Directive controls are software based and driven by technical/logical controls.

A compensating control acts as a backup control when the primary control fails.

What should you do if you receive an email from someone you don't know?

All of these are categories of multi-factor authentication except.  

Which country was suspected to be behind the WannaCry attack