APCSP IOC-2.C Cybersecurity Threats

What is the primary technique used in phishing?

• Installing software to record keystrokes.

• Setting up unauthorized wireless networks.

• Tricking a user into providing personal information.

• Intercepting data sent over public networks.

The personal information obtained through phishing is subsequently used for what purpose?

• To improve the user's online experience.

• To perform security updates on the user's system.

• To gain fraudulent access to passwords and confidential information via keystroke recording.

• To access sensitive online resources like bank accounts and emails.

How does keylogging software function to obtain confidential information?

• By tricking users into clicking disguised malicious links.

• By recording every keystroke made by the computer user.

• By creating a fake wireless access point to intercept data.

• By sending unsolicited emails with malicious attachments.

What specific risk is highlighted concerning data sent over public networks?

• Data automatically gets deleted after transmission.

• Data transmission speed significantly decreases.

• Data can be intercepted, analyzed, and modified.

• Data requires multifactor authentication for viewing.

What is the defining characteristic of a 'rogue access point'?

• It is any free Wi-Fi hotspot available in public areas.

• It is a wireless access point providing unauthorized access to secure networks.

• It is a program designed to record user keystrokes.

• It is an email designed to trick users into revealing passwords.

A user connects their laptop to an unfamiliar Wi-Fi network named 'Free_Airport_WiFi' that appears legitimate but was set up by an attacker. This scenario directly involves which specific threat mentioned in the standards?

• Keylogging

• Phishing

• Rogue access point

• Untrustworthy freeware download

Where can malicious links be disguised?

• Only within computer hardware components.

• Only in system security logs.

• On a web page or in an email message.

• Exclusively within paid software applications.

Unsolicited emails can compromise security. What potentially dangerous elements might these emails contain?

• Only plain text messages without any interactive elements.

• Attachments, links, and forms.

• Software updates from verified vendors.

• Digital certificates from trusted authorities.

A user receives an urgent email seemingly from their boss asking them to click a link and enter their login credentials to view an important document. However, the boss's email account was compromised. This situation best illustrates which standard?

• The risk of untrustworthy freeware downloads containing malware.

• The function of keylogging software recording keystrokes.

• The danger of unsolicited content from known senders whose security has been compromised.

• The definition of a rogue access point giving unauthorized network access.

What potential security risk is explicitly associated with downloading software from freeware or shareware sites?

• The software might require excessive system resources.

• The downloads may contain malware.

• The sites often require creating user accounts.

• The software might not be compatible with the user's operating system.