TS Security

Which kind of online attack involves pretending to be a legitimate company to get sensitive information?

• Impersonating

• Spyware

• Virus

• Phishing

A user was offered a 25% share of this account if she would help the sender transfer it to a bank in the United States.

• Eavesdropping

• Phishing

• Man-in-the-Middle

• Piggybacking

Joe, a user, receives an email from a popular video streaming website urging him to renew his membership. The email appears official, but Joe has never had a membership before. When Joe looks closer, he discovers that a hyperlink in the email points to a suspicious URL.

Which of the following security threats does this describe?

• Trojan horse

• Phishing

• Zero-day attack

• Man-in-the-middle

What is the best countermeasure against social engineering?

• Acceptable use policy

• User awareness training

• Strong passwords

• Access auditing

You are a security consultant and an organization has hired you to review their security measures. They are chiefly concerned that they could become the victim of a social engineering attack.

Which of the following would you MOST likely recommend they do to mitigate the risk?

• Implement a border firewall to filter inbound network traffic.

• Establish a written security policy.

• Teach users how to recognize and respond to social engineering attacks.

• Train managers to monitor user activity.

Which of the following is a common form of social engineering attack?

• Using a sniffer to capture network traffic.

• Hoax virus information emails.

• Stealing the key card of an employee and using that to enter a secured building.

• Distributing false information about your organization's financial status.

Which of the following is a form of attack that tricks victims into providing confidential information, such as identity information or logon credentials, through emails or Websites that impersonate an online entity that the victim trusts, such as a financial institution or well-known e-commerce site?

• Phishing

• Fraggle attack

• Social engineering

• Session hijacking

Dana is an IT administrator who is working on a company-wide initiative to address confidentiality concerns about secure information being revealed to unauthorized individuals.

Which of the following would be topics on the team agenda? (Select two.)

• Replay attack

• Snooping

• Data destruction

• Social engineering

Which of the following are examples of social engineering? (Select two.)

• Port scanning

• Shoulder surfing

• Dumpster diving

• Brute force password cracking

Maintaining confidentiality in the workplace is important for building and maintaining trust and for ensuring an open and honest communication between customers, clients, and employees. Which of the following threatens data confidentiality?

• Replay attacks

• Power outages

• Man-in-the-Middle attacks

• Dumpster diving