Security I - Day 3 - Review of Day 2

What was the topic of the Day 2 Lecture?

• Vulnerabilities and Threats

• Physical Security/Virtualization and Cloud Security

• Authentication/ Authorization and Access Control

• Introduction to Security Terminology/Types of Attacks

What as a domain is included in Homework # 1?

• Architecture and Design

• Implementation

• Attacks, Threats, and Vulnerabilities

• Operations and Incident Response

What was the topic of SkillSoft Video Training of Day 2?

• Social Engineering Techniques & Attack Types

• Threat Actors, Intelligence Sources, & Vulnerabilities

• Authentication & Authorization Design Concepts

• Security Policies, Regulations, Standards, & Frameworks

A script kiddie would most likely be involved in what type of activity?

• Creating password cracking scripts to compromise networks

• Developing and testing hacker tools

• Vandalizing public websites

• Intercepting and modifying email messages

Which security goal is compromised by a DDoS attack?

• Confidentiality

• Integrity

• Nonrepudiation

• Availability

What is the primary risk of an integer overflow attack?

• Header manipulation

• Arbitrary code execution

• Session hijacking

• Directory traversal

Which of the following can be used to launch a coordinated DDoS attack?

• Bot

• Rootkit

• Adware

• Worm

Malware that can show advertisements, track information, and make changes to endpoints without user knowledge is called _____.

• Keyloggers

• Ransomware

• Worms

• Spyware

Infected PC serves a session back to C2C server acting as a client in which of the following common malware?

• Spyware

• RAT

• Keyloggers

• Worms

Which of these is more related to an on-premise provider as opposed to a cloud-based provider?

• Higher technical expertise

• Better availability, resiliency, and durability

• More experience and familiarity with systems

• Better physical separation