Font size
WorksheetsCyber 1 Module 1 Review
Total questions: 38
Worksheet time: 28mins
Performing shoulder surfing in order to check someone's password is ____________ ethical practice.
a good
not so good
a very good social engineering
a bad
___________ has now evolved to be one of the most popular ways to perform unethical hacking.
Automated apps
Database software
Malware
Worms
Which example illustrates how malware might be concealed?
An email is sent to the employees of an organization with an attachment that looks like an antivirus update, but the attachment actually consists of spyware.
An attack is launched against the public website of an online retailer with the objective of blocking its response to visitors.
A hacker uses techniques to improve the ranking of a website so that users are redirected to a malicious site.
A botnet of zombies carry personal information back to the hacker.
Which of the following are good cyber hygiene practices (check all that apply)
Keep sensitive information in secure places
Make sure a trustworthy person knows your password in case you forget it
Lock your computer when in public areas
Do not let strangers use your computer
Do not use public wifi
A __________ is the method by which an attacker can use to take advantage of a bug or weakness in a network or system to cause harm
Threat
Exploit
Vulnerbility
Risk
Which type of attack requires an attacker to use a brute force approach?
denial of service
password cracking
social engineering
packet sniffing
Preventing the target servers from being able to handle additional requests is the primary goal of (a) attack.
Leaking your company data to the outside network without prior permission of senior authority is a not crime.
True
False
What are infected machines that carry out a DDoS attack?
(a)
A _______ is any person or action that is able to cause harm.
Threat
Exploit
Vulnerbility
Risk
Which two characteristics describe a worm? (Choose two.)
infects computers by attaching to software code
travels to new computers without any intervention or knowledge of the user
is self-replicating
hides in a dormant state until needed by an attacker
executes when software is run on a computer
A risk and a vulnerability are the same thing.
True
False
A __________ is a weakness that can be exploited by attackers.
Threat
Exploit
Vulnerbility
Risk
___________ is a special form of attack which exploits human psychology and aims to manipulate people into giving up PII
Cross Site Scripting
Insecure network
Social Engineering
Reverse Engineering
Which of the following is the technique used to look for information in trash for PII?
Pretexting
Baiting
Quid Pro Quo
Dumpster Diving
This is an entry point into a program without all the normal, built-in security checks.
(a)
The full form of Malware is (a)
Attempts to manipulate people into giving up PII over the phone
(a)
These are a collective term for malicious spying programs used for secretly monitoring someone’s activity and actions over a digital medium.
(a)
Which type of technology can prevent malicious software from monitoring user activities, collecting personal information, and producing unwanted pop-up ads on a user computer?
antispyware
password manager
adware
two factor authentication
In most phishing attacks, this technology is targeted by attackers in order to obtain PII via social engineering.
WI-FI network
operating systems
Surveillance camera
The type of malware that gets into a system and spreads to other computers in the network without any human assistance
worm
virus
trojan
antivirus
What is the best way to create and then remember strong passwords?
Save the passwords in a centralized password manager program.
Write the passwords down and place them out of sight.
Create a single strong password to be used across all online accounts.
Share the passwords with the network administrator or computer technician.
Create a base password made of a phrase using leet speak followed by the first three characters of the specific site
Which method of malware will record all your keystrokes?
(a)
Saving passwords in the browser is a good habit.
True
False
This type of malware is when there is a compromised computer under the control of an attacker.
(a)
A (a) is a group of compromised or hacked computers (bots) controlled by an individual with malicious intent.
Other than the fact that this Not addressed to a specific person, how can you tell this email is a phishing attack? (check any that apply)
Spelling and/or grammar mistakes
Suspicious domain
Unsolicited attachment
From a department instead of an individual in the company
Link to log into account or redeem item found within the email
Fraud attempts perpetrated by random attackers against a wide number of users, normally through fake emails.
(a)
Attempts to manipulate people into giving up PII by text message (SMS)
(a)
Fraudulent emails sent to Microsoft employees aiming to steal Microsoft secrets
phishing
spear-phishing
vishing
smishing
Fraud attempts targeted at specific people based on their membership or affiliation with spoofed group
(a)
This type of malware can infect and spread without human assistance
(a)
How can you tell this email is a phishing attack? (check any that apply)
Spelling and/or grammar mistakes
Suspicious domain
Unsolicited attachment
From a department instead of an individual in the company
Link to log into account or redeem item found within the email
This type of malware is when a program is hidden that has a malicious function ... it looks like something you want but it does something you do not want.
(a)
This malware is designed to lie dormant until a specific logical condition is met.
(a)
What is the ethics behind training how to hack a system?
To think like hackers and know how to defend such attacks
To hack a system without the permission
To hack a network that is vulnerable
To corrupt software or service using malware
This type of malware can infect and spread, but need human assistance
(a)
