Target Cyber Attack Quiz

Where was the stolen information from Target's network sent?

• Western Europe

• Eastern Europe

• South America

• Asia

Answer explanation

The stolen information from Target's network was sent to Eastern Europe, where cybercriminals often operate, making it a common destination for such data breaches.

What did the attackers plan to use to exfiltrate data from Target's network?

• Public networks

• Escape routes

• Encrypted emails

• Secure servers

Answer explanation

The attackers planned to use escape routes to exfiltrate data from Target's network, indicating they had a strategy for moving data out discreetly, rather than relying on public networks or secure servers.

What type of warnings did Target fail to respond to regarding data exfiltration?

• Manual warnings

• Automated warnings

• Verbal warnings

• Written warnings

Answer explanation

Target failed to respond to automated warnings about data exfiltration, which are system-generated alerts designed to notify about potential security breaches. This highlights a critical oversight in their data protection measures.

What does the report suggest about Target's response to the breach?

• Target responded quickly

• Target missed opportunities to stop the attackers

• Target had no security measures

• Target overreacted

Answer explanation

The report indicates that Target missed opportunities to stop the attackers, suggesting that their response was inadequate in preventing the breach despite having some security measures in place.

What does a higher successful use rate for card batches indicate?

• Lower price

• Higher price

• No change in price

• Immediate cancellation

Answer explanation

A higher successful use rate for card batches typically indicates that the demand is strong, which can lead to higher prices due to increased value and scarcity. Thus, the correct answer is 'Higher price'.

What is the main reason banks often cannot identify compromised cards quickly?

• Lack of technology

• Insufficient time

• Lack of interest

• Insufficient funds

Answer explanation

Banks often struggle to identify compromised cards quickly due to insufficient time. The rapid pace of transactions makes it challenging to monitor and detect fraudulent activity in real-time.

What was the purpose of the Target press release on December 19, 2013?

• To announce a new product

• To confirm the data breach

• To report financial earnings

• To introduce a new CEO

Answer explanation

The Target press release on December 19, 2013, was issued to confirm the data breach that had affected millions of customers, making it a critical communication regarding security and customer trust.

Who confirmed that malware was installed on Target's POS terminals?

• Brian Krebs

• Gregg Steinhafel

• Adam Greenberg

• Becky Quick

Answer explanation

Gregg Steinhafel, the former CEO of Target, confirmed that malware was installed on the company's POS terminals during the data breach incident, making him the correct choice.

What did the malware allow for the collection of?

• Encrypted data

• Plaintext data

• Financial data

• Personal data

Answer explanation

The malware was designed to collect plaintext data, which is unencrypted and easily readable. This allows attackers to access sensitive information without the need for decryption, making it a significant threat.

What type of device is a POS terminal?

• A personal computer

• A physical device used to process payments

• A mobile phone

• A network server

Answer explanation

A POS terminal is specifically designed as a physical device used to process payments, making it distinct from personal computers, mobile phones, or network servers.