Chapter1

Which of the following is NOT a characteristic of Advanced Persistent Threat (APT)?

• can span several years

• targets sensitive proprietary information

• uses advanced tools and techniques

• is only used by hactivists against foreign enemies

Which of the following was used to describe attackers who would break into a computer system without the owner’s permission and publicly disclose the vulnerability?

• white hat hackers

• black hat hackers

• blue hat hackers

• gray hat hackers

Which the following is NOT a reason why it is difficult to defend against today’s

attackers?

• increased speed of attacks

• simplicity of attack tools

• greater sophistication of defense tools

• delays in security updating

Why can brokers command such a high price for what they sell?

• Brokers are licensed professionals

• The attack targets are always wealthy corporations

• The vulnerability was previously unknown and is unlikely to be patched quickly

• Brokers work in teams and all the members must be compensated.

Which phrase describes the term “security” in a general sense?

• protection from only direct actions

• using reverse attack vectors (RAV) for protection

• only available on hardened computers and systems

• the necessary steps to protect a person or property from harm

______ ensures that only authorized parties can view the information.

• Confidentiality

• Availability

• Authorization

• Integrity

Each of the following is a successive layer in which information security is achieved

EXCEPT ___________.

• products

• purposes

• procedures

• people

What is a person or element that has the power to carry out a threat?

• threat agent

• exploiter

• risk agent

• vulnerability

____________ ensures that individuals are who they claim to be.

• Demonstration

• Accounting

• Authentication

• Certification

What is the difference between a hactivist and a cyberterrorist?

• A hactivist is motivated by ideology while a cyberterrorists is not.

• Cyberterrorists always work in groups while hactivists work alone.

• The aim of a hactivist is not to incite panic like cyberterrorists.

• Cyberterrorists are better funded than hactivists