Intro to Cyber Security Final Exam

Which of the following is NOT an element that determines if the threat of cyber stalking is credible?

Susceptibility

What is the name of the group that consists of several thousand Chinese hackers whose stated goal is to infiltrate western computer systems?

The Chinese Eagle Union

Define industrial espionage

The use of spying to find out key information that is of economic value.

What is a term for a program that looks benign but actually has a malicious purpose?

Trojan horse

Which of the following is a type of Malware?

Trojan horse

Explain 2 ways a virus scanner works.

Uses a list of known viruses or look for unusual behavior

What is a disadvantage(s) of a DoS attack?

(1) They must be sustained (2) They can be tracked (D. B and C)

List the three types of firewalls .

(1)Packet inspection, (2) stateful packet inspection, and (3) application

Name the 4 categories of online auction fraud identified by the US FTC

1) Failure to send the merchandise 2) Sending something of lesser value than advertised 3) Failure to deliver in a timely manner 4) Failure to disclose all relevant information about a product or terms of the sale

Provide the two ways that viruses spread.

1) Scan your computer for connections to a network then copy itself to other machines on the network 2) Read your email

Why is having a password that is used in common language not safe?

A dicitonary attack will discover the password

Define a computer virus

A program that self-replicates

Name 3 binary operations in encryption.

AND, OR, XOR

Define Denial of Service (DoS)

An attack that prevents users from accessing the system

How long has information warfare existed?

As long as information has existed

Identify another name for the Shift Cipher.

Caesar Cipher

What is the first rule of computer security?

Check for patches

A protocol that translates web addresses into IP addresses is call what?

DNS

What policy determines what to do to recover data?

Disaster Recovery Plan

What is rule #1 of a cyber crime investigation?

Do not touch the suspect drive

Select which is not one of the four categories identified by the US FTC as auction.

Failure to send the merchandise to the appropriate address

What is the first step to understanding a computer and its security?

Formulating a realistic assessment of threat to the system

What is one of the most common dangers on the Internet?

Fraud

Which of the following distracts an attacker with information that will keep them connected long enough to give you the ability to track them?

Honey pot

Snort is an example of what kind if tool?

IDS, intrusion detection system

What makes the most prominent weakness of DOS attacks a problem for the attackers?

If you have to maintain a connection, you can be tracked

What property of information causes it to be stolen?

Information is an asset; it has value

What layer handles transmission across Ethernet, fiber, and wireless networks?

Layer 1, Physical layer

Routers are included in which layer?

Layer 3, Network Layer

In what layer does encryption take place?

Layer 6, Presentation Layer

White hat hackers are also known as what?

Penetration testers or Pen testers

What is the term for hacking a phone system?

Phreaking

This is Window's system configuration database in which system and application settings are stored. In particular, malware likes to modify this database to make the system run the malware at startup.

Registry

Name two of the seven types of threats identified in Chapter 1

Security breach, DoS, malware, phishing, web attacks, session hijacking, insider threats, DNS poisoning

Name three auction frauds listed by the FTC

Shill bidding, Bid shielding, Bid siphoning

Which of the following is not an attack that can be used by a black hat hacker?

Stack tweaking

What example of weaponized malware is given in the book?

Stuxnet

An exploit that is unknown to the product's developers but is know to a hacker is?

Zero day

What is the name for writing in or deciphering secret code?

cryptography

Where do you go to find the sex offender registry?

fbi.gov

What is the term used to describe making a computer system safer?

hardening

What label us given to a patch that should be applied unless you have a compelling reason otherwise?

important or critical

What is a document that defines a company's security?

security policy

What are two basic types of cryptography used today?

symmetric and asymmetric