Cybersecurity

What does GDPR stand for?

General Data Protection Regulation

Something of value.

asset

Encrypted data.

ciphertext

GDPR is ____________________ legislation.

gdpr

The cybersecurity parable about Tim dealt primarily with which issue?

identity theft

Malware that tries to alter a system in order to prevent itself from being detected.

rootkit

Software that secretly captures and transmits a user's data, credentials, passwords, or usage behavior.

spyware

Using social media to find personally identifiable information is an example of ______________ OSINT.

technical

Make another party assume responsibility for a risk.

transfer

An attack without any days of prior warning, or a novel attack method.

zero-day

Which of the following best represents the concept of a logic bomb?

"Ambush" malware; code that waits for a particular event or circumstance to occur before it executes.

About how many people in the United States are victims of identity theft each year?

10,000,000

Which of the following best represents the concept of whitelist?

A collection of permitted or allowed actions or items.

Which of the following best represents the concept of single point of failure?

A component of a system which, if it stops functioning properly, adversely affects the entire system.

Which of the following best represents the concept of bot or zombie?

A compromised computer under the control of an attacker for the purpose of launching attacks.

In the context of risk management, which of the following best represents the concept behind the word "avoid?"

Abandon a potentially dangerous activity.

A data file used to verify a credential. This authentication method is an example of "something you have."

Certificate

Acknowledge risk without addressing it.

accept

The act of using an information system.

access

A way to regulate who or what can use a resource in an information system.

access control

Records of actions performed.

accounting

Software that displays advertisements on a computer display, or intercepts input to collect marketing data.

adware

A physical boundary between information systems, in which devices in one system are not and have never been networked to devices or data in the other system.

air gap

A mathematical procedure or recipe that may be used to transform data.

algorthim

Software or a system used to accomplish tasks is

an application

Software to detect and prevent execution of worms and viruses.

antivirus

An act that carries out a threat.

attack

The assurance/verification that a user is genuine and not an impostor.

authetication

Social pressure to obey, defer to, or respect the directions of an expert or a leader.

authority

Limited permission granted to perform an action.

authorization

The United Kingdom's National Health Service was crippled when an attack with software called "WannaCry" rendered many of their computers unusable. Over 19,000 medical appointments had to be cancelled, which caused NHS to lose over £92 million. This is an example of what type of cyber security breach?

availability

Instead of a login prompt on your computer, you get a message saying your system has been encrypted and you can no longer access it unless you follow the instructions to pay bitcoin, which will then allow you to decrypt your system. Which of the following would best allow you to recover without giving in to the hacker's demands?

backup

One phenomenon that the rise of the Internet has led to is the collection and analysis of

big data

An intrinsic body feature, such as a fingerprint or voice pattern, used to verify a credential. This authentication method is an example of "something you are."

biometric

A collection of forbidden actions or items.

blacklist

_____________ is usually used for gadgets and peripherals rather than connections to the Internet.

bluetooth

A compromised computer under the control of an attacker for the purpose of launching attacks.

bot

The threat actor in control of a botnet.

bot herder

A group of compromised "bot" computers.

botnet

Exhaustively test every possible input (usually passwords) until one is found that produces a desired result.

brute force tetx

A situation in which an amount of data to be processed exceeds the amount of memory a programmer allocated to contain that data, causing adjacent memory to be overwritten.

buffer overflow

Researchers have called ________________ a propaganda machine.

cambride analytica

An encryption algorithm that substitutes characters with other characters.

cipher

Plaintext that is transmitted clearly instead of transformed into ciphertext before transmission.

cleartext

External Internet-based information resources, which may be rented or leased.

cloud

Variation of reciprocity: social pressure to concede to a smaller request after having resisted a larger request.

concession

PCI DSS compliance is enforced through _________.

contracts

.Data saved by a web browser on behalf of a web server.

cookie

The legal control of how a creative work may be disseminated, distributed, or exhibited.

copyright

cholastic Inc. can legally distribute the Harry Potter novels in the United States, and Warner Bros. Entertainment Inc. can legally distribute the Harry Potter films based on those novels. This is an example of what

copyright

Attempts to recover plaintext from ciphertext with limited or no knowledge of the algorithm or keys.

cryptanalysis

Software that encrypts data and offers a decryption mechanism after payment of a ransom.

crypto maware

Under GDPR, personal data is any data that can __________ you.

data

After Keiko spends some time playing an adventure game, she saves her progress and turns off the computer. She turns on the computer again to play the game the next day, and she doesn't have to restart the adventure at the beginning because the system stored or remembered her previous accomplishments. This is an example of

data at rest

Information saved to long-term storage media.

data at rest

Information being used or manipulated by a computer.

data being processed

Information being copied or moved from one machine to another.

data in transit

Using an algorithm with keys to recover encrypted data.

decryption

A stance of forbidding everything except what a whitelist specifically allows.

default deny policy

Using multiple types of controls or defenses, each of which an attacker would need to penetrate.

defense in depth

The loss of availability.

denial of service

Which kind of intellectual property law applies if a clockmaker wants to make and sell "knock-off" clocks that look identical to another clockmaker's popular clocks?

design rights

Attempt to guess a password by trying words from a dictionary or from a similar list of candidates.

dictionary attack

Security professionals are faced with more _______________ temptations due to their exposure to more data and information that most traditional employee

ethical

Principles that govern and support acceptable behavior or conduct.

ethics

To steal data; to transfer or copy data without authorization.

exfiltrate

Software or processes that take advantage of a bug or vulnerability to make a system behave in an unintended manner.

exploit

In the past few years, tapes have become a more attractive backup target than disks because of their lower cost, better reliability, and more flexibility

false

Internet of Things devices are not vulnerable to identity theft.

false

A device or software to control the kinds of transmissions that are denied (blacklisted) or permitted (whitelisted) on a network connection.

firewall

There are three steps to making friends with your ethical self. Which of the following is not one of them?

give positive affirmition

Intentionally accessing a computer system without (or in excess of) authorization.

hacking

A credential that represents an individual using an information system.

identification

Crimes in which someone wrongfully obtains and uses another person's personal dat

identituy theft

Crimes in which someone wrongfully obtains and uses another person's personal data

identity theft

Risk = Probability X

impact

Actions undertaken in the aftermath of an incident.

incedint response

An occurrence of a successful attack.

incident

ensures that the data stored on devices is correct and no unauthorized persons or malicious software has altered data.

integrety

The assurance that an information resource is correct and protected from unauthorized modification.

integrity

An idea, invention, or process derived from the work of the mind or intellect.

intellectual property

The Book of Mormon Videos are an example of ________________________ of the Church of Jesus Christ of Latter-day Saint

intellectual property

In today's society and culture, we need to ask if ______________ should be a human right.

internet access

There are lots of answers to core questions because of the "big secret." What is the big secret?

it depends

Wireless denial of service; an attempt to interfere with or overwhelm a wireless signal with a flood of extra radio frequency signal energy.

jamming

A secret collection of numbers or keystrokes used by a cryptographic algorithm.

key

Software that secretly records a user's input.

keylogger

The key to thwarting a brute-force password cracking attempt is having a password with more

length

Social pressure to emulate or seek approval of people you admire or like.

liking

"Ambush" malware; code that waits for a particular event or circumstance to occur before it executes.

logic bomb

One of the ethical principles behind the development of the Internet is the idea of ______________.

net neutrality

Reduced ability to hear due to chronic exposure to loud sounds, such as high volume audio from earbuds or headphones

noise induced hearinf loss

Shoulder surfing to observe someone's password is an example of what?

non techincal osint

Which of the following is NOT a type of intellectual property?

none of these

Variation of reciprocity: social pressure to gratefully respond after you are relieved of a burden.

obligation

General definitions of privacy state that a person is free from

observation

skills are at the top of the list for non-technical OSINT.

observational

A clothing store keeps employee records on a server in an equipment closet. This is an example of ____________ information resources

on-premise

Local information resources, owned and operated by an organization.

on-premise

s the life blood of social engineering.

osint

The legal control of how an invention may be manufactured and distributed.

patent

One way for us to regain custody and control of our data is for ____________________.

people to be paid for their data.

Which of the following is not a malware cybersecurity threat?

phishing

Understandable data, before it is encrypted or after it is decrypted.

plaintext

Duplicating a resource, to eliminate single points of failure and ensure availability.

redundanyc

How can I care for those with no power?

relationship lens

How do I use my power and resources fairly?

relationship lens

What kind of character do I want to develop?

reputation lens

How can I treat others with respect?

result

What do I really want and need to be happy?

result lens

Why am I making this choice?

right/responsibilty lens

How can I treat others as they want to be treated?

rights/repsonsinilt lens

A ________, in plain language, is a chance of something bad happening combined with how bad it would be if it did happen.

risk

A situation that involves exposure to danger.

risk

An email invites you to click on a link, and also informs you that the first 200 recipients to do so will win a gift certificate.

scarcity

Software that uses hoaxes to trick users into installing malware.

scareware

Compulsive behavior associated with cravings to use devices to connect with online media and negative psychological symptoms when unable to connect

screen addiction

An access control mechanism that prevents use of a device until an unlocking action is successfully performed.

screen lock

You are attempting to use your friend's mobile phone, but you don't know their PIN code. After three failed attempts, a message tells you that access to the mobile device has been suspended. Which of the following terms best represents the concept at play?

screenlock

Authorization to operate a computer system using a command-line or graphical user interface.

shell access

A component of a system which, if it stops functioning properly, adversely affects the entire system.

single point failure

A component of a system, which, if it stops functioning properly, adversely affects the entire system.

single point failure

A ____________ is a negative event that can lead to an undesired outcome, such as damage to, or loss of, an asset.

threat

A type of action that has the potential to cause harm

threat

A person or entity that has the power to carry out a threat.

threat actor

The following are examples of ___________. Hacktivists Cybercriminals Disgruntled insiders Nation States Careless employees

threat actors

In 2018 the company Grumpy Cat Limited defended the use of its Grumpy Cat name against another company, Granade Beverage, which tried to use the name without permission to sell Grumpy Cat branded coffee items. This is an example of what?

trademark

The legal control of how names and images representing a product, creative work, or brand may be used.

trademark

Software that disguises itself as useful, but actually contains malware.

trojan

Intellectual property is the output of innovation, new products, and technologies that are protected so that they can thrive in the marketplace.

true

Online shopping fraud is a form of identity theft

true

A collection of permitted or allowed actions or items.

whitelist

Malware that automatically spreads copies of itself to other computers over a network.

worm

Which of the following best represents the concept of advanced persistent threat?

Threat actors carrying out attacks over an extended time period without being detected.

Which of the following best represents the concept of nation state actor?

Threat actors employed by a government or military.

Requiring two different methods of authentication to verify a credential.

2FA

Which of the following best represents the concept of a procedure?

A collection of detailed plans and prescriptions for how a policy is pursued and implemented. (It answers the question, "How should it happen?")

Which of the following best represents the concept of a firewall?

A device or software to control the kinds of transmissions that are denied (blacklisted) or permitted (whitelisted) on a network connection.

Which of the following best represents the concept of jamming?

Wireless denial of service; an attempt to interfere with or overwhelm a wireless signal with a flood of extra radio frequency signal energy.

Data saved by a web browser on behalf of a web server.

a cookie

Having and being responsible for your records of actions you performed.

accountability

A threat actor engaged in carrying out a threat.

attacker

The assurance that an information resource is accessible in a timely manner.

availability

ensures network resources are readily accessible to authorized users.

availability

Abandon a potentially dangerous activity.

avoid

Software that circumvents normal security controls, in order to provide access to a computer or service.

backdoor

A copy of information system's data, to preserve it in case of loss or destruction of the system or its information.

backup

The science of transforming data in order to use, store, or transmit it securely.

cryptology

Internet-based systems hidden or obscured from traditional search engines and the public.

dark web

Using an algorithm with keys to transform data, making it unintelligible to everyone except intended recipients.

encryption

Software that acts against the best interests of a user.

malware

An incorrectly configured device.

misconfiguration

Make a risk less serious.

mitigate

Encrypted data is [ Select ] ["cleartext", "ciphertext", "plaintext"] . Text that is transmitted without being encrypted before transmission is called cleartext .

plaintext Answer 2:Correct!ciphertext Answer 3:Correct!cleartext

GDPR is a law passed by the European Union. It's primary purpose is to address _________.

privacy

The privilege of being free from observation or interference, to the degree that you choose.

privacy

A simple step we can take to protect ourselves from even the most sophisticated trackers is to use ________________ more.

private browsing

Information without any privacy restrictions constitute which type of data classification?

public

Software that prevents availability of a computer resource until a ransom is paid.

ransomware

Which of the following best represents the concept of air gap?

A physical boundary between information systems, in which devices in one system are not and have never been networked to devices or data in the other system.

Which of the following best represents the concept of an acceptable use policy?

A policy that defines the actions users may perform while accessing systems and network equipment.

Which of the following best represents the concept of a buffer overflow?

A situation in which an amount of data to be processed exceeds the amount of memory a programmer allocated to contain that data, causing adjacent memory to be overwritten.

Which of the following best represents the concept of risk?

A situation that involves exposure to danger.

Which of the following best represents the concept of default deny policy?

A stance of forbidding everything except what a whitelist specifically allows.

For whom am I a role model?

reputation lens

Social pressure based on the perception that resources are limited.

scarcity

Disabling unused services, changing default accounts/passwords, and updating or patching a system.

system hardening

Organizational control of confidential intellectual property.

tradesecret

Which of the following best represents the concept of hacktivist?

A threat actor that is strongly motivated by ideology.

Which of the following best represents the concept of control?

A tool to regulate or guide security efforts; can be preventive, detective, corrective, etc.

Which of the following best represents the concept of zero-day?

An attack without any days of prior warning, or a novel attack method.

Identify the type of authentication used (have/know/are) in the following spy scenario: I knock on the door and my assistant answers through the door "Who is it?" I reply "It is me"

Are

Which of the following best represents the concept of a dictionary attack?

Attempt to guess a password by trying words from a list word candidates.

Which of the following best represents the concept of cryptanalysis?

Attempts to recover plaintext from ciphertext with limited or no knowledge of the algorithm or keys.

What is the main point about the following IT security saying? "You don't have to be faster than the lion; you just have to be faster than the other guy running away from the lion."

Hackers are looking for the easiest targets when it comes to end users.

Which is probably the most recognized acronym in the information security industry?

CIA

A telephone solicitor asks you for a large amount of money for a very good cause. You say you cannot afford that much. The solicitor then asks for a small amount of money. This is an example of which principle of influence?

Concession

A company announced that it suffered an incident in which private information was stolen and disclosed. The disclosed data included names, email addresses, passwords, dates of birth, and phone numbers. This is an example of what type of cyber security breach?

Confident

The assurance that an information resource is protected from unauthorized exposure.

Confidentiality

A date on which a vendor stops supporting a product or service.

EOL

Do not ever write a password down on a piece of paper.

False

If a person tampers with an election by altering ballot data or adding additional ballots, that scenario represents a failure of which information security characteristic?

Integrity

For increased password strength, include all of the following in your password, except:

Modifier keys e.g. fn, alt, ctrl

is the life blood of social engineering.

OSINT

Which principle of influence depends social norms or expected behavior?

Obligation

Which of the following contribute to screen addiction?

Frequent stimulation from a social media app or game Operant conditioning (or "cue" sounds) from a social media app or game Unpredictable stimulation from a social media app or game

Which of the following best represents the concept of spyware?

Software that secretly captures and transmits a user's data, credentials, passwords, or usage behavior.

Which of the following best represents the concept of scareware?

Software that uses hoaxes to trick users into installing malware.

Which of the following best represents a social engineer using a hoax in order to manipulate a target?

A hoax could convince a user that a virus is circulating, and that he should reset his email security settings to protect his computer system.

is a calculated network attack on any organization. These threats occur when a hacker, or group of hackers, establishes a foothold inside of an enterprise network. They go undetected for prolonged periods of time, allowing for sensitive data to be mined.

An APT (advanced persistent threat)

A hotel is able to increase the number of customers who reuse towels by putting a note in their room telling that most of their other customers also share towels. This is an example of which principle of influence?

Consensus

Someone makes a small request of you and you grant it. Then they make a similar, but larger request of you and you feel obligated to grant it too. This is an example of which principle of influence?

Consistency

The following are examples of APTs (advance persistent threats), except:

DDOS (distributed denial of service)

An attempt to overwhelm a service with a flood of traffic from many computers or a botnet.

DDos

All of the following are types of password attacks except:

Denial of service attacks

Which of the following best represents the concept of system hardening?

Disabling unused services, changing default accounts/passwords, and updating or patching a system.

CompTIA recommends changing passwords how often?

Every three months.

Identify the type of authentication used (have/know/are) in the following spy scenario: I walk into the back room of a pawn shop and am met by a brawny thug carrying a gun. He tells me to get lost. I reply "Skinny Joe sent me." He lets me in.

Know

When negotiating business contracts, agreements were nearly twice as likely when negotiators took time to establish relationships. This is an example of which principle of influence?

Liking

If the company you work for loses data due to a backup failure, what factors should you consider when you estimate how badly the lost data will cost your business?

Lost time Lost orders Lower morale Diminished reputation Lost customers

Requiring more than one method of authentication to verify a credential.

MFA

Who are the two types of employees when it comes to IT security? (Choose two)

Major risk employees Minimal risk employees

Which of the following best represents the concept of mitigation?

Making a risk less serious.

Which of the following best represents the concept of a worm?

Malware that automatically spreads copies of itself to other computers over a network.

Which of the following best represents the concept of a virus?

Malware that spreads copies of itself to other computers when it is executed by a user.

What does OSINT stand for?

Open Source Intelligence

Phishing is a cybersecurity threat used for all of the following except:

Password cracking.

PCI DSS?

Payment Card Industry Data Security Standard

Software that disguises itself as useful, but actually provides a backdoor.

Rat

Which of the following best represents the concept of ransomware?

Software that prevents availability of a computer resource until a ransom is paid.

Which of these is NOT an alternative term or synonym for "information security?"

Risk Management

A man dressed as a telephone repairman was able to gain unauthorized access to the business' server room based on the pretense that he had just checked the "Internet problem" at the businesses on either side and that they checked out okay. This is an example of which principle of influence?

Social proof

When we are lost, confused, or unsure, we generally look to others to see how they are acting for cues for what we should be doing. This is an example of which principle of influence?

Social proof

Which of the following best represents the concept of a backdoor?

Software that circumvents normal security controls, in order to provide access to a computer or service.

Which of the following best represents the concept of RAT (remote access trojan)?

Software that disguises itself as useful, but actually provides a backdoor.

Which of the following best represents the concept of adware?

Software that displays advertisements on a computer display, or intercepts input to collect marketing data.

When it come to to online trackers, we have developed a ________________ mentality.

Stockholm syndrome

All of the following are good ways to thwart password attacks except:

Stop clicking on suspicious links.

Which of the following best represents the concept of external threat?

The potential of someone outside an organization to be a threat actor.

Which of the following definitions best matches the concept of Two Factor Authentication from a security standpoint?

The process of requiring two different methods to verify a creditial

Identity theft is a crime in which someone wrongfully obtains and uses another person's personal data.

True

The strongest passwords will have a combination of the following characteristics, except:

Use a common password

All of the following are good ways to manage passwords on multiple Web sites, except:

Use a very strong password that is long and randomly generated on all your Web sites

All of the following are good ways to thwart rogue software attacks except:

Use encrypted wireless access points.

All of the following are good ways to thwart man in the middle attacks except:

Use lengthy passwords made up of random characters.

All of the following are good ways to thwart malvertising attacks except:

Use secure connections to web sites (such as https).

All of the following are good password strategies to keep you safe, except:

Use short passwords so you will be able to remember them..

Which of the following best represents the concept of encryption?

Using an algorithm with keys to transform data, making it unintelligible to everyone except intended recipients.

Malware that spreads copies of itself to other computers by user interaction.

Virus

A flaw or weakness that allows a threat actor to bypass security.

Vulnerability

A wireless local area network

WLAN

The original set of protections from the WiFi Alliance designed to address both encryption and authentication.

WPA

Currently, the most secure model for protecting WiFi communications.

WPA2

Which of these are acceptably correct descriptions of the concept of privacy?

Your privacy is self-determination of how much public attention you attract. Your privacy is your privilege to be left alone as much as you choose. Your privacy is your right to be free of attention, observation, or interference, basd on your decision.

A centrally located WLAN connection device that can send and receive information, or a node that connects wireless endpoints with another network.

AP (access point)

A low power, energy efficient wireless technology, usually used for gadgets and peripherals rather than connections to the Internet

Bluetooth

The CIA triad applies to information that is in storage and in transit, but not in processing.

False

Identify the type of authentication used (have/know/are) in the following spy scenario: As I begin some high-level negotiations, I offer my hand to shake. My opponent recognizes the ring I am wearing which identifies me as a member of his secret society. Based on this association, he gives me some top-secret information.

Have

Which of the following definitions best matches the concept of accountability from a security standpoint?

Having or being responsible to your records of actions you performed

A secret sequence of numbers used to verify a credential. This authentication method is an example of "something you know."

PIN

At a restaurant, a waiter gives you a free desert because "you are awesome," in the hopes that you might give a better tip. This is an example of which principle of influence?

Reciprocity

Food companies often provide free samples because they know people are more likely to buy their product after receiving a free sample. This is an example of which principle of influence?

Reciprocity

Which principle of influence depends on creating feelings of debt?

Reciprocity

The most common overuse injuries related to computer and device use are to

Wrists

You check a box on a web site affirming that you have read and understood its privacy policy, and the web site software keeps a record that you checked the box. This is an example of which access control principle?

accountability

Which of these best describes the task or purpose of "backup" in the world of computers and cybersecurity?

an extra copy of data from a computer

The door to Batman's bat cave requires a voice command (something he is), his key (something he has), and a pattern on a keypad (something he knows) in order to get inside. This is an example of multi-factor _____________________.

authentication

Social pressure to go along with the behavior of people you are with.

consesus

The loss of confidentiality

disclosure

Hassan posted an opinion on a social media platform that made John angry. John found Hassan's cell phone number and copied it in a comment to the post, asking everyone to flood Hassan with phone calls and text messages letting him know how ashamed he should be for his objectionable opinion.

doxxing

Sarah's parents were standing in the hall outside of a meeting room, in which adult ward leaders met to discuss the ideas that the young men and young women had proposed for a summer youth activity. They overheard one leader share his opinion that he considered Sarah's activity idea to be strange.

eavesdropping

The tool most commonly used to achieve confidentiality is

encryption

Which of these is a tool used to protect data integrity?

error checking methods

A stranger dressed in an electrician's work uniform contacted Wally at his apartment, and said that he was there to do a safety check on all of the electrical outlets. Wally invited him in. While pretending to check the power outlet behind Wally's computer station, he distracted Wally long enough to secretly insert a flash drive into a port on the back of the computer. The flash drive proceeded to automatically install malicious software.

impersonation

Salima wants to join the church, but her parents insist that if she does so she will no longer be considered to be part of their family.

manipulation by intimidation

A clothing store keeps employee records on a server in an equipment closet. This is an example of ____________ information resources.

on premise

A secret sequence of characters used to verify a credential. This authentication method is an example of "something you know."

password

The loss of integrity.

tampering

Which of the following definitions best matches the concept of authentication from a security standpoint?

Assurance that a user is genuine and not an imposter

ensures that only authorized parties with sufficient privileges may view the information.

Confidentiality

An airline announced they would discontinue a flight that was no longer profitable. The very next day, bookings for that flight increased dramatically. This is an example of which principle of influence?

Scarcity

A caller on the telephone tells you that there is a new virus spreading through advertisement banners on web pagers, and that you should reset your web browser to its default security settings in order to protect yourself. But when you independently try to verify the caller's claims, you can find no evidence about any such new virus. Which of these is most likely?

The caller was using a hoax, hoping to convince you to weaken your browser's security.

A good rule of thumb to avoid noise induced hearing loss: If you are listening to music using headphones or earbuds while having a conversation with someone about an arm's-length away, but you can't understand that person unless they raise their voice, then your music device's volume is too loud.

True

Intellectual property is the output of innovation, new products, and technologies that are protected so that they can thrive in the marketplace.

True

A trademark of the WiFi Alliance, which certifies devices that use wireless networking technologies to connect to the Internet

Wifi

An arrangement in which a person may use computer or network services.

account

You use your correct password when you log into Amazon.com, so the web site trusts that you are the valid account holder. This is an example of which access control principle?

authentication

If banking customers are unable to check their balance or withdraw their funds in a timely manner because of a computer problem, the situation is a failure of

availability

A cybersecurity event that results in a loss of confidentiality, integrity, or availability.

breach

The Jones family keeps a shared document on the grandmother's Google Drive, on which each child and grandchild plans the food they want to bring to the next family reunion potluck dinner. This is an example of ____________ information resources

cloud

Social pressure to increase your loyalty to a decision once a choice has been made.

consistency

Scholastic Inc. can legally distribute the Harry Potter novels in the United States, and Warner Bros. Entertainment Inc. can legally distribute the Harry Potter films based on those novels. This is an example of what?

copywright

A BYU-Idaho student's financial account suffered a loss of over $900.00; the funds were transferred to an account not belonging to the student. This is an example of what type of cyber security breach?

integrity

Until 2019, the company GlaxoSmithKline had the sole legal right to manufacture and sell the asthma treatment drug Advair. This is an example of what

patent

A computer running Microsoft's Windows operating system has at least one "Administrator" account with elevated privileges. This is an example of a

priveleged account

An account with additional authorization beyond a regular user's account.

priveleged account

Social pressure to feel the need to respond in kind when you are given a gift or favor.

reciprocity

Painful injury to muscles and nerves, caused by cumulative damage from repetitive movements.

repetitive strain injury

Jane's system access lets her run just about any software utility installed on her computer, either by selecting a program from a menu or by typing the program's name at a command prompt. This is an example of a

shell account

This involves tricking people by using their natural human tendencies or behaviors.

social engineering

In emergency situations, it has been observed that if only one bystander is nearby to respond to the emergency, then that bystander will almost always either stop to help, or call or find someone else to help. But it has also been observed that, if there are a crowd of witnesses to the emergency situation, each individual in the crowd will almost always pause and wait to see what the rest of the bystanders will do, or wait to see if some other person in the crowd will help or call somebody. What social engineering principle does this illustrate?

social proof (or "consensus")

A device used to verify a credential. This authentication method is an example of "something you have."

token

The owners of a catering business carefully guard their recipe for breaded dutch-oven chicken, so that nobody else can make and sell the same food. This is an example of what?

trade secret

Which kind of intellectual property is not protected by any IP laws after being revealed or disclosed?

trade secret

Variation of liking: social pressure to cooperate with people with whom you have built a rapport.

trust

An email invites you to click on a link to receive a free gift, and also informs you that you must do so before Friday night at midnight before the offer expires.

urgency

Variation of scarcity: social pressure based on the perception that time is limited.

urgency