CF Chapter 1- 4

What is an example of an Internet data domain?

• Cisco

• Juniper

• Linkedin

• Palo Alto

Answer explanation

Refer to chapter 1 slide 4
A data domain is a repository for data.

What does the acronym IoE represent?

• Internet of Everyday

• Internet of Everything

• Insight into Everything

• Intelligence on Everything

Answer explanation

refer to chapter 1 slide 5
Internet of Everything is the term used for Internet-connected devices

What type of an attack can disable a computer by forcing it to use memory or by overworking its CPU?

• APT

• algorithm

• DDoS

• exhaustion

Answer explanation

refer to chapter 1 slide 24
Algorithm attacks can force computers to use memory or overwork the CPU.

What does the term vulnerability mean?

• a known target or victim machine

• a method of attack to exploit a target

• a potential threat that a hacker creates

• a weakness that makes a target susceptible to an attack

Answer explanation

Refer to chapter 1 slide 13

A vulnerability is not a threat, but it is a weakness that makes the PC or the software a target for attacks.

What type of attack uses many systems to flood the resources of a target, thus making the target unavailable?

• DoS

• spoof

• DDoS

• ping sweep

Answer explanation

Refer to chapter 1 slide 25
DDoS is is an attack that involves multiple systems. DoS involves only a single attack system.

Name 1 types of records that cyber criminals would be interested in stealing from organizations. (multiple answers)

• personal, medical

• education

• employment

• financial

Answer explanation

Refer to Chapter 1 - Slides 14 Common Threats - Threat Arenas
The following examples are just a few sources of data that can come from established organizations:
Personal Information
Medical Records
Education Records
Employment and Financial Records

Thwarting cyber criminals includes which of the following? (Choose two.)

• hiring hackers

• changing operating systems

• establishing early warning systems

• sharing cyber Intelligence information

Answer explanation

Refer to Chapter 1 - Slides 10 Cybersecurity Specialists
Thwarting the cyber criminals is a difficult task and there is no such thing as a “silver bullet.” However, company, government and international organizations have begun to take coordinated actions to limit or fend off cyber criminals. The coordinated actions include:
1) Vulnerability Database
2) Early Warning Systems
3) Share Cyber Intelligence
4) ISM Standards
5) New Laws

What name is given to hackers who hack for a cause?

• hackivist, hackivists (eg. anonymous grp)

• Grey hat hackers

• black hat

• white hat

Answer explanation

Refer to Chapter 1 - Slides 8 Cybersecurity Criminals (Cont.)
Hacktivists - Grey hat hackers who rally and protest against different political and social ideas. Hacktivists publicly protest against organizations or governments by posting articles, videos, leaking sensitive information, and performing distributed denial of service (DDoS) attacks.

What name is given to a amateur hacker?

• script kiddie, script kiddies

• Hackivists

• Vulnerability brokers

• white hat

Answer explanation

Refer to chapter 1 slide 8
Script kiddies is a term used to describe inexperienced hackers.

What is the workforce framework category that includes highly specialized review and evaluation of incoming cybersecurity information to determine if it is useful for intelligence?

• Analyze

• Securely Provision

• Protect and Defend

• Oversight and Development

Answer explanation

Refer to Chapter 1 - Slides 28 - A Workforce Framework for Cybersecurity (Cont.)
The Workforce Framework categorizes cybersecurity work into seven categories.
1) Operate and Maintain
2) Protect and Defend includes the identification, analysis, and mitigation of threats to internal systems and networks.
3) Investigate
4) Collect and Operate
5) Analyze includes highly specialized review and evaluation of incoming cybersecurity information to determine if it is useful for intelligence.
6) Oversight and Development provides for leadership, management, and direction to conduct cybersecurity work effectively.
7) Securely Provision includes conceptualizing, designing, and building secure IT systems.