Cybersecurity Key Terms 4, 5, and 6

Which of the following is NOT a form of malware?

• Zero-day vulnerability

• Logic Bomb

• Worm

• Trojan

Which threat is identified as its ability to remain hidden for long periods of time?

• Advanced persistent threat (APT)

• Polymorphic virus

• Trojan

• Armored virus

Which type of malware encrypts data so the user cannot access it unless a fee is paid to the hacker?

• Trojan

• Ransomware

• Rootkit

• Polymorphic

Which of the following best defines a zero-day vulnerability?

• Software that has been installed directly on hardware

• Personal information found in the trash

• Technology that tracks a user’s keystrokes

• A vulnerability that has existed in software since its release

Which type of cookie only exists when visiting a website and is deleted once the browser is closed?

• Session cookies

• Persistent cookies

• Secure cookies

• Third-party cookies

Social engineering often relies on (a)   , which is the use of lies or scams to obtain private information.

• Phishing

• Pretexting

• Baiting

• Quizzing

A phishing attack in which the recipients are deliberately chosen for attack is known as (a)   .

• Spear phishing

• Watering hole

• Pharming

• Whale phishing

Which of the following is an e-mail protocol used to validate the legitimacy of an email address?

• Separation of duties

• Clean-desk policy

• SPF

• AUP

Which of the following would most likely be considered PII?

• Date of birth

• Name

• E-mail address

• All of the above

An important security practice is (a)   , which divides responsibilities so no single individual has total control over a process or task.

• Segregation of Duties

• Least Privilege

• Defense in Depth

• Incident Response