Chapter 3 Cyber security

what term describes an action that can damage or compromise an asset?

Threat

what type of attack involves the creation of some deception in order to trick unsuspecting users?

Trojan horse

an attacker has physical presence on a local network and is forging MAC addresses. what type of attack is taking place?

ARP poisoning

what type of loss did the company experience as a result of lost sales?

Opportunity costs

users throughout an organization have been receiving unwanted commercial messages over the organization's instant messaging program. what type of attack is this?

Spim

what is an example of a disclosure threat?

espionage

what type of malicious software masquerades as legitimate software to entice the user to run it?

evil twin

an access point is being broadcasted to another building of an open network. what type of attack is taking place

fabrication

a rootkit uses directed broadcast to create a flood of network traffic for the victim computer.

false

an attacker uses exploit software when wardialing

false

the anti-malware utility is one of the most popular backdoor tools in use today

false

what control is not designed to combat malware?

firewall

a wire tap will monitor communications without making any modifications. what type of wiretap is this?

passive wiretap

what group is the most likely target of a social engineering attack?

receptionists and administrative assistants

what type of attack does the attacker attempt to take over an existing connection between two systems?

session hijacking

An alteration threat violates information integrity.

true

Failing to prevent an attack all but invites an attack.

true

a DoS attack is attack is a coordinated attempt to deny service by occupying a computer to perform large amounts of unnecessary attacks

true

a birthday attack is a type of cryptographic attack that is used to make brute-force attack of one-way hashes easier

true

a man-in-the-middle attack takes advantage of the multihop process used by many types of networks.

true

a phishing email is a fake or bogus email intended to trick the recipient into clicking on an embedded URL link or opening an email attachment

true

what type of attack against a web application uses a newly discover vulnerability that is not patchable?

zero-day attack

an attacker attempting to break into a facility pulls the fire alarm to distract the security guard. what type of social attack is this?

urgency

what type of person attempts to break into the systems belonging to his clients?

white hat hacker

When servers need operating system upgrades or patches, administrators take them offline intentionally so they can perform the necessary work without risking malicious attacks.

true