Cybersecurity Unit 8 Review

What is a person or entity that is responsible for an event or incident that impacts or has the potential to impact the safety or security of another entity?

• Threat Actor
• Pen Tester
• Script Kiddie
• Vulnerability Tester

Which of the following is a type of Threat Actor?

• Hacktivists
• A Nation State
• Insider Threats
• All of the above

What is a script kiddie? (Select all that apply)

• Threat actor that runs attack scripts they created themselves
• Threat actor that has deep technical knowledge about attack scripts
• Threat actor that runs attack scripts created by others
• Threat actor that runs scripts for investigative purposes

What is the threat group name for China?

• Bear
• Panda
• Jaguar
• Cheetah

Which of the following Threat Actor's motivation is money?

• APT
• Script Kiddies
• Organized crime
• Hacktivist

What are threat vectors?

• The direction (or path) that a malicious actor takes to apply an attack
• The ways malicious files and scripts can enter systems and get past defenses to cause an attack
• A measurement of the amount of time an attack occurs and the damage it causes
• None of the above

Social media can be utilized the same way as email in regards to threat vectors.

• True
• False

Which of the following is NOT true regarding removeable media?

• It can be used to install malicious code on the system it is plugged in to
• It can download files off the system it is plugged in to
• The malicious user must be the one to plug it in to the system
• If the port is disabled, the removeable media won't be able to install malicious files

What does OSINT stand for?

• Onsight intelligence
• Open source intelligence
• Organizational stage intelligence
• One stage intelligence

What is https://us-cert.cisa.gov/ncas/alerts an example of?

• Patch management
• Vulnerability database
• Honeypot
• Honeynet