Worksheets1.4 - Network Attacks
Total questions: 14
Worksheet time: 9mins
Name
Class
Date
1.
What is meant by the term 'blagging'?
a)
It is when fraudsters send emails pretending to be a bank or e-commerce site to try and find out your personal and financial details. Messages are often urgent and have spelling mistakes.
b)
Sometimes called pretexting, done either face-to-face, by telephone or using a computer. Criminals invent a scenario to get the victim to divulge information.
c)
Finding out login names, passwords and pins by watching people at ATM’s, or in an office where employees enter passwords or when people pay for goods at tills and people watch the PINs being entered.
d)
Software that is deigned to corrupt files and stop your computer from working.
2.
What is meant by the term 'shouldering'?
a)
Finding out login names, passwords and pins by watching people at ATM’s, or in an office where employees enter passwords or when people pay for goods at tills and people watch the PINs being entered.
b)
Sometimes called pretexting, done either face-to-face, by telephone or using a computer. Criminals invent a scenario to get the victim to divulge information.
c)
It is when fraudsters send emails pretending to be a bank or
e-commerce site to try and find out your personal and financial details. Messages are often urgent and have spelling
mistakes.
3.
What is meant by the term 'phishing'?
a)
Finding out login names, passwords and pins by watching people at ATM’s, or in an office where employees enter passwords or when people pay for goods at tills and people watch the PINs being entered.
b)
Sometimes called pretexting, done either face-to-face, by
telephone or using a computer. Criminals
invent a scenario to get the victim to divulge information.
c)
It is when fraudsters send emails pretending to be a bank or e-commerce site to try and find out your personal and financial details. Messages are often urgent and have spelling mistakes.
4.
This software is designed to disrupt the functioning of the computer, gain unauthorised access and gather information without the users knowledge - what is it?
a)
Applications sofware
b)
Systems software
c)
Malicious software
d)
Utility software
5.
How does a virus infect a computer and how is it malicious?
a)
It is disguised as something legitimate like a computer game. Once inside it can log key strokes, record passwords and can allow someone to remote access your computer.
b)
Software that usually infects a computer system via email attachments or being attached to files on memory sticks. It requires human help to infect a computer. It can corrupt/delete files and slow your pc down.
6.
How does a trojan horse infect a pc and how is it malicious?
a)
Software that is disguised as something legitimate like a computer game. Once inside it can log key strokes, record passwords and can allow someone to remote access your computer.
b)
Software that is similar to a virus, although it can infect your computer without human help, instead through security loopholes. Once inside your computer it can replicate itself across networks. It is malicious as it can slow your pc down, delete files and send documents via email.
7.
What is meant by the term spyware?
a)
A type of spyware that causes adverts to pop-up on your screen. Some can be inappropriate. They waste your time and distract you from what you are doing.
b)
Malware that you may have received in an email. This can change the IP address of a domain name entered to a bogus one.
c)
Software similar to a 'Trojan' as it spies on what you are doing and passes this information back across the internet.
d)
Fraudsters sending emails pretending to be banks etc... recognised by : careless use of language, urgency, false links and attachments.
8.
What is ransomware and how is it malicious?
a)
Software similar to a 'Trojan' as it spies on what you are doing and passes this information back across the internet.
b)
Programs that attempt to blackmail a user into making a payment to a hacker, If money isn't paid, the network can be shutdown.
c)
Software that is similar to a virus, although it can infect your computer without human help, instead through security loopholes. Once inside your computer it can replicate itself across networks. It is malicious as it can slow your pc down, delete files and send documents via email.
d)
Software that is disguised as something legitimate like a computer game. Once inside it can log key strokes, record passwords and can allow someone to remote access your computer.
9.
What is a brute force attack?
a)
General attack on network - no specialist knowledge. Done by trial and error to obtain login names and passwords to allow hacker to access network. Success is based on computer power and number of combinations tried.
b)
Designed to make a network or website grind to a halt by using 'Zombie' computers to flood them with useless network communication such as repeated login requests at the same time.
c)
Criminals use packet analysers or 'packet sniffers' to intercept data traffic. Criminals try and steal logins, passwords, credit card numbers.
d)
Websites use databases to store user details.User enters username and password - this is checked against SQL database.Criminals can bypass this using special commands.
10.
What is meant by a denial of service (DOS) attack?
a)
Designed to make a network or website grind to a halt by using 'Zombie' computers to flood the network/websites with useless network communication such as repeated login requests at the same time.
b)
Criminals use packet analysers or 'packet sniffers' to intercept data traffic. Criminals try and steal logins, passwords, credit card numbers.
11.
Data interception and theft is when criminals use packet analysers or 'packet sniffers' to intercept data traffic. Criminals try and steal logins, passwords, credit card numbers - TRUE or FALSE?
a)
TRUE
b)
FALSE
12.
What is meant by SQL injection?
a)
New programs are tested for security faults.The day a security flaw is found is called 'zero day'. There is a race between hackers and company to exploit and fix.
b)
Criminals use packet analysers or 'packet sniffers' to intercept data traffic. Criminals try and steal logins, passwords, credit card numbers.
c)
Websites use databases to store user details.User enters username and password - this is checked against SQL database.Criminals
d)
General attack on network - no specialist knowledge. Done by trial and error to obtain login names and passwords to allow hacker to access network. Success is based on computer power and number of combinations tried.
13.
What is meant by a zero-day attack?
a)
Designed to make a network or website grind to a halt by using 'Zombie' computers to flood the network/website with useless network communication such as repeated login requests at the same time.
b)
Websites use databases to store user details.User enters username and password - this is checked against SQL database.Criminals can bypass this using special commands.
c)
Criminals use packet analysers or 'packet sniffers' to intercept data traffic. Criminals try and steal logins, passwords, credit card numbers.
d)
New programs are tested for security faults.The day a security flaw is found is given a special name. There is a race between hackers and company to exploit and fix.
14.
Define the term 'social engineering'
a)
Humans a the weak point in network security, by clicking a link etc..
b)
A computer program used by hackers to exploit flaws in networks
100 %
