Cybersecurity Flashcard

Front

What is the primary difference between a vulnerability and an exploit?

Back

A vulnerability is a weakness in a system, while an exploit is the method used to take advantage of that weakness.

Front

During which stage of the cyberattack lifecycle does an attacker gather information about a target? Options: Exploitation, Reconnaissance, Weaponization, Command-and-Control, Installation

Back

Reconnaissance

Front

Which of the following is an example of weaponization in the cyberattack lifecycle? Scanning for open ports on a target system., Creating a malicious payload to deliver via phishing email., Establishing a command-and-control server., Installing a backdoor on a compromised system., Exfiltrating sensitive data from the victim's system.

Back

Creating a malicious payload to deliver via phishing email.

Front

What happens during the exploitation phase of the cyberattack lifecycle?

Back

The attacker uses a vulnerability to gain unauthorized access to a system.

Front

What is the primary goal of the command-and-control (C2) stage?

Back

To establish ongoing communication with the compromised system.

Front

Which of the following best describes malware? Options: Software designed to monitor user activities without permission., A type of attack where malicious actors intercept communication., Any software intentionally designed to cause harm to a system., A large-scale attack designed to overwhelm network resources., A method of gaining unauthorized access by deceiving users.

Back

Any software intentionally designed to cause harm to a system.

Front

What is the primary purpose of spyware?

Back

Monitoring user activity and stealing sensitive information.

Front

Which of the following best describes a Trojan? A type of malware that disguises itself as legitimate software. A virus that spreads through email attachments. A network-based denial-of-service attack. A tool for intercepting communication between two parties. A method for exploiting unpatched vulnerabilities.

Back

A type of malware that disguises itself as legitimate software.

Front

Ransomware attacks primarily involve:

Back

Encrypting data and demanding payment for decryption.

Front

What is the primary function of an Intrusion Detection System (IDS)?

Back

Detect and alert on suspicious network activity.