Ch. 10.2 - 10.4

What is the best countermeasure against social engineering?

• User awareness training

• Acceptable use policy

• Access auditing

• Strong passwords

Which of the following is a common form of social engineering attack?

• Stealing the key card of an employee and using that to enter a secured building.

• Distributing false information about your organization's financial status.

• Hoax virus information emails.

• Using a sniffer to capture network traffic.

Mark received an email from a software company claiming his account will be disabled soon. The email contains several spelling errors, an attachment, and states he should open the attachment for further instructions. What should Mark do?

• Delete the email without opening the attachment.

• Open the attachment because he has anti-virus software installed.

• Forward the email to a friend and ask for advice.

• Reply to the sender and ask if the attachment is safe.

Which of the following describes a Man-in-the-Middle attack?

• A person over the phone convinces an employee to reveal their logon credentials.

• An IP packet is constructed which is larger than the valid size.

• Malicious code is planted on a system where it waits for a triggering event before activating.

• An attacker intercepts communications between two network hosts by impersonating each host.

A technician walks into the office with a UPS. What sort of threat will this device prepare a system for?

• Data redundancy

• Power outage

• Wiretapping

• Denial-of-service

A large number of compromised computers are infected with malware that allows an attacker (herder) to control them to spread email spam and launch denial-of-service attacks.

Which of the following does this security threat describe?

• Spoofing

• Zombie/botnet

• Man-in-the-middle

• Phishing

You work for a company that offers their services through the Internet. Therefore, it is critical that your website performs well. As a member of the IT technician staff, you receive a call from a fellow employee who informs you that customers are complaining that they can't access your website. After doing a little research, you have determined that you are a victim of a denial-of-service attack.

As a first responder, which of the following is the next BEST step to perform?

• Investigate how the attack occurred.

• Hire a forensic team to gather evidence.

• Prevent such an incident from occurring again.

• Contain the problem.

Which of the following are the BEST steps you can take to avoid having your mobile device exploited by a hacker or infected by a virus? (Select two.)

• Lock the screen with some form of authentication

• Keep your device always in your possession

• Keep an up-to-date remote backup

• Keep the operating system up to date

• Turn off location services

In which of the following situations should you expect total privacy?

• Email messages and attachments

• Instant messaging

• Financial transactions

• Social networking

In which of the following should you expect some privacy?

• Metadata stored by a web browser

• Personally identifiable information entered into a human resource database

• Sharing a photo through a mobile phone app

• Emailing an important document to a friend using an employer email system

Answer explanation

A person should have an expectation of some privacy for any PII entered into a database.

Metadata is typically used by third parties for marketing and sales use, such as when you visit a vendor's website. Metadata will be stored on your computer that identifies you the next time you visit a web site, and targeted ads may be displayed based on your previous searches or interactions.

There is no expectation of privacy for employer-based email systems and all data transmitted is considered business related.

Sharing a photo through a mobile phone app, such as an instant messenger, does not typically provide an expectation of privacy but depends on the privacy statement from the application vendor.