Cyber Q4 Flashcard

Front

Which of the following is an example of a passive online attack? XSS, Packet sniffing, DDoS, Social Engineering

Back

Packet sniffing

Front

What is a race condition in software development?

Back

A race condition is a situation in software development where the behavior of software depends on the relative timing of events, such as the order in which threads are scheduled to run, leading to unpredictable results.

Front

If a site crashes when you input more than 200 characters, this could be due to limited:

Back

Buffer

Front

A risk response that eliminates a threat is called:

Back

Avoidance

Front

Which of the following is an example of risk mitigation? Options: Educating employees about threats, Eliminating the cause of a risk, Accepting a lower profit, Purchasing insurance

Back

Educating employees about threats

Front

When should a risk be avoided? Options: When the risk has a very high probability of occurrence and high impact, When it can be transferred, When the risk event has a low probability and impact, A risk event can never be avoided

Back

When the risk has a very high probability of occurrence and high impact

Front

Purchasing insurance to cover a risk is an example of: Acceptance, Elimination, Avoidance, Transfer

Back

Transfer

Front

Which step in penetration testing involves gathering public info like social media and scanning the company’s site?

Back

Reconnaissance

Front

What are you doing if you’re recording when and where internet traffic occurs?

Back

Sniffing the network

Front

What is a zero-day attack?

Back

A zero-day attack is a cyber attack that occurs on the same day a vulnerability is discovered in software, before the vendor has had a chance to issue a fix.