Fundamentals of IT and Cybersecurity Chapter 3 Study Guide
Which statement describes a distributed denial of service attack
An attacker builds a botnet comprised of zombies
What is a vulnerability that allows criminals to inject scripts into web pages viewed by users?
cross site scripting
What best practices can help defend against social engineering attacks?
educate employees resist the urge do not provide
A cyber criminal sends a series of maliciously formatted packets to the database server. The server cannot parse the packets and the event causes the server crash. What is the type of attack the cyber criminal launches?
Dos
The employees in a company receive an email stating that the account password will expire immediately and requires a password reset within 5 minutes. What would would be the classifification of this malicious email?
It is a hoax
What type of attack will make illegitimate websites higher in a web search result list?
SEO poisoning
What type of attack targets an SQL database using the input field of a user?
SQL injection
What occurs on a computer when data goes beyond the limits of a buffer?
a buffer overflow
What is the meaning of the term logic bomb?
a malicious program that uses a trigger to awaken the malicious code
A computer is presenting a user with a screen requesting payment before the user data is allowed to be accessed by the same user. What type of malware is this?
a type of ransomeware
What is the name for the type of software that generates revenue by generating annoying popups?
adware
What is the name given to a program or program code that bypasses normal authentication?
backdoor
An attacker is sitting in front of a store and wirelessly copies emails and contact lists from nearby unsuspecting user devices. What type of attack is this?
blue snarfing
What type of application attack occurs when data goes beyond the memory areas allocated to the application?
buffer overflow
An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?
intimidation
What are the tactics used by a social engineer to obtain personal information from an unsuspecting target?
intimidation urgancy
What are two ways to protect a computer from malware? (Choose two.)
keep software up to date use anti virus software
A penetration testing service hired by the company has reported that a backdoor was identified on the network. What action should the organization take to find out if systems have been compromised?
look for unauthorized accounts
What does a rootkit modify?
operating system
What is the term used when a malicious party sends a fraudulent email disguised as being from a legitimate, trusted source?
phishing
Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?
ransomware
Which term describes the sending of a short deceptive SMS message used to trick a target into visiting a website?
smishing
What type of attack has an organization experienced when an employee installs an unauthorized device on the network to view network traffic?
sniffing
What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?
social engineering
What is the term used to describe an email that is targeting a specific person employed at a financial institution?
spear phishing
What is an impersonation attack that takes advantage of a trusted relationship between two systems?
spoofing
A criminal is using software to obtain information about the computer of a user. What is the name of this type of software?
spyware
What are the common indicators of spam mail?
the email has misspelled words or punctuation errors or both the email has no subject line
What reasons that make WEP is a weak protocol?
the key is transmitted in clear text the key is static and repeats on a congested network
What are the most effective ways to defend against malware?
update the operating system and other application software install and update antivirus software
Users report that the network access is slow. After questioning the employees, the network administrator learned that one employee downloaded a third-party scanning program for the printer. What type of malware might be introduced that causes slow performance of the network?
worm
What is the difference between a virus and a worm?
worms self reproduce while viruses do not
