CIS27B Quiz 2 Review

Which of the following is a type of unintentional insider threats, who expose an organization sensitive information to a threat through carelessness?

• imprudent insider threat

• negligent insider threats

• ignorant insider threats

• accidental insider threats

Determine the type of espionage when a Chief Information Officer (CIO) is paid to leak client data to a competing company.

• government espionage

• competitive espionage

• criminal espionage

• economic espionage

Determine the type of insider threats when an employee mistyped e-mail addresses and sent sensitive information to external recipients. Select all applied options.

• accidental insider threats

• unintentional insider threats

• intentional insider threats

• third-party insider threats

Determine the type of insider threats when a staff member is collaborating with a branch manager to steal data from the organization for financial gains. 

• third-party insider threats

• collaborative insider threats

• collusive insider threats

• inclusive insider threats

Determine the type of espionage when a US researcher leaked US government weapon design to Russia for financial gains. Select all applied options.

• government espionage

• economic espionage

• international espionage

• criminal espionage

Which of the following options is true when an engineering contractor steals machinery designs from the company to leverage his new job negotiation?

• third-party property theft

• economic crime

• financial crime

• intellectual property theft

Determine the type of cyber insider threats when a manager removes group permissions from various folders and deletes important files from the network drives before leaving the company.

• unintentional cyber insider threat

• intentional cyber insider threat

• organizational cyber insider threats

• hierarchic cyber insider threats

What can be used to identify patterns and anomalies in user actions that may indicate a potential insider threat?

• User Activities Analytics (UAA)

• User Events Analytics (UEA)

• User Behavior Analytics (UBA)

• User Patterns Analytics (UPA)

What type of attacks involves unauthorized interception and monitoring of network traffic?

• sniffing attacks

• session hi-jacking attacks

• Man-In-The-Middle attacks

• replay attacks

What are the goals behind sniffing attacks on a network?

• To identify the critical systems and use them as bots in a botnet.

• To obtain data and redirect network traffic.

• To overwhelms the target systems and make it unavailable on the network.

• To identify and exploit vulnerabilities.