Threat Landscape Review Questions

Which of the following is an internal threat?

• Hacker launching ransomware from another country

• Employee accidentally clicking a phishing link

• Government cyber warfare operation

• Hacktivist defacing a website

Which domain deals with the physical protection of devices and infrastructure?

• Cloud

• Web

• Physical

• Network

Which of these is a network-based attack?

• SQL Injection

• DDoS (Denial of Service)

• Stolen USB stick

• Website defacement

Why are cloud services often a target?

• They are used only by governments

• They are isolated from the internet

• One misconfiguration can expose millions of users

• They are never updated

Which of these is an example of a web attack?

• Malware spreading through USBs

• SQL Injection in a shopping site

• Man-in-the-Middle on Wi-Fi

• Power outage in a data center

Hacktivists are mainly motivated by:

• Money

• Fun

• Political or social messages

• Selling stolen data

The Stuxnet attack (2010) that targeted nuclear plants is an example of:

• Criminals

• Hacktivists

• State-Sponsored actors

• Insider threat

What is social engineering?

• Writing malicious code

• Manipulating people to reveal information

• Overloading servers with traffic

• Defacing websites with graffiti

Which global company was breached in 2011 by a single phishing email with the subject line "2011 Recruitment Plan"?

• eBay

• RSA

• Netflix

• Microsoft

Which of the following best defines malware?

• Fake websites that steal logins

• Any malicious software designed to damage or steal

• An employee misusing their access

• Flooding a server with traffic