Review Chapter 2 NE, Security Awareness ch 1 quiz
Script kiddies typically have advanced knowledge of computers and networks.
False
Social networking.
Grouping Individuals and organizations into clusters or groups based on their likes and interests is called.
True
Passwords are not considered a strong defense against attackers.
Fair and Accurate Credit Transactions act.
The ____ of 2003 contains rules regarding consumer privacy.
True
Virtually anyone could type in person's username and pretend to be that person.
Whaling
one type of spear phishing
the goal to be free from danger as well as the process that achieves that freedom
threat agent
Social engineering
use of a telephone call instead of email to contact a potential victim
What is a flaw or weakness that allows a threat agent to bypass security?
vulnerability
From January 2005 through July 2015, approximately how many electronic data records in the United States were breached, exposing to attackers a range of personal electronic data, such as address, Social Security numbers, health records, and credit card numbers?
853 million
Dictionary
A_____ attack begins with the attacker creating digests of common dictionary words, and then comparing those in a stolen password file.
Password
Any secret combination of letters, numbers, and or symbols that serves to validate or authenticate a user by what she knows.
Where are you most likely to find a PKES system?
Automobile
Which of the following is NOT a factor that contributes to difficulties faced in defending against attacks?
Enhanced encryption algorithms
12 months.
FACTA grants consumers that right to request one free credit report from each of the three national credit-reporting firms every
In a well-run information security program, attacks will never get through security perimeters and local defenses.
False
There is a straightforward and easy solution to securing computers.
False
Which law requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information?
GLBA
How do attackers today make it difficult to distinguish an attack from legitimate traffic?
How do attackers today make it difficult to distinguish an attack from legitimate traffic?
Which of the following involves stealing another person's personal information, such as a Social Security number, and then using the information to impersonate the victim, generally for financial gain?
Identity theft
What term is frequently used to describe the tasks of securing information that is in a digital format?
Information Security
Pharming
Instead of asking the user to visit a fraudulent web site, ______ atomically redirects the user of the fake site.
Which of the following ensures that information is correct and no unauthorized person or malicious software has altered it?
Integrity
impersonation
Social engineering_____means to create a fictitious character and then play out the role of that person on a victim.
Social networking sites
The Web sites that facilitate linking individuals with common interests and function as an online community of users are called.
Password management tool.
The best approach to establishing strong security with passwords is to use a
True
The weakness of passwords centers on human memory
Attack tools can initiate new attacks without any human participation, thus increasing the speed at which systems are attacked.
True
Today, many attack tools are freely available and do not require any technical knowledge to use.
True
Change of address.
Using standard ______form, attackers can divert all mail to their post office so that the victims never see any charges mades.
Identity theft.
____ Involves using someone's personal information, such as Social Security number, to establish bank credit card accounts that are then left unpaid, leaving the victims with the debts and ruining their credit rating.
Organizational Charts.
_____ Identify individuals within the organization who are in positions of authority.
Pretexting.
_____ Means an attacker who pretends to be from a legitimate research firm asks for personal information.
Phishing
_______is sending an e mail or displaying a Web announcement that falsely claims to be from a legitimate enterprise, in an attempt to trick the user into surrendering private information.
Targeted attacks against financial networks, unauthorized access to information, and the theft of personal information are sometimes known as ____________________.
cybercrime
What does the FBI define as any "premeditated, politically motivated attack against information, computer systems, computer programs, and data which results in violence against non-combatant targets by sub-national groups or clandestine agents?"
cyberterrorism
Terrorists who turn their attacks to the network and computer infrastructure to cause panic among citizens are known as which of the following?
cyberterrorists
Shoulder Surfing
information entered is observed by another person
Security is ____ convenience.
inversely proportional to
It is vital to have ____________________ security on all of the personal computers to defend against any attack that breaches the perimeter.
local
Information contained on devices is protected by three layers: Two of the layers are products and policies and procedures. What is the third
products, people, & policy and procedures
Which phrase best describes security?
the goal to be free from danger as well as the process that achieves that freedom
Which of the following is a type of action that has the potential to cause harm?
threat