Worksheets2.1 Understanding Attacks
Total questions: 15
Worksheet time: 9mins
A subcategory of hacker threat agents. They are willing to take more risks and use more extreme tactics for financial gain.
Cybercriminal
Black Hat Hacker
Gray Hat Hacker
Cyberterrorist
A sovereign state threat agent that may wage an all-out war on a target and have significant resources for the attack.
Script Kiddie
Hacktivist
Nation State
A threat that seeks to gain access to a network and remain there undetected.
Persistent Threat
Non-Persistent Threat
A threat that focuses on getting into a system and stealing information. It is usually a one-time event, so the attacker is not concerned with detection.
Persistent Threat
Non-Persistent Threat
Open-source intelligence (OSINT) is information that is readily available to the public and doesn't require any type of malicious activity to obtain.
False
True
A skilled hacker who uses skills and knowledge for defensive purposes only. The white hat hacker interacts only with systems for which express access permission is given.
Gray hat
Black hat
White hat
Script kiddie
An employee stealing company data could be an example of which kind of threat actor?
External threat
Internal threat
Which of the following is the BEST definition of the term hacker?
Any individual whose attacks are politically motivated.
The most organized, well-funded, and dangerous type of threat actor.
A general term used to describe any individual who uses their technical knowledge to gain unauthorized access to an organization.
A threat actor whose main goal is financial gain.
Which of the following threat actors seeks to defame, shed light on, or cripple an organization or government?
(a)
The IT manager in your organization proposes taking steps to deflect a potential threat actor. The proposal includes the following:
*Create and follow onboarding and off-boarding procedures.
*Employ the principal of least privilege.
*Have appropriate physical security controls in place.
Which type of threat actor do these steps guard against?
Cybercriminal
Nation State
Competitor
Insider
A script kiddie is a threat actor who lacks knowledge and sophistication. Script kiddie attacks often seek to exploit well-known vulnerabilities in systems.
What is the BEST defense against script kiddie attacks?
Build a comprehensive security approach that uses all aspects of threat prevention and protection.
Keep systems up to date and use standard security practices.
A hacker scans hundreds of IP addresses randomly on the internet until they find an exploitable target. What kind of attack is this?
Targeted attack
Insider attack
Opportunistic attack
Nation state attack
Stealing information and crashing systems fall into which category?
Reconnaissance
Breaching
Escalating privileges
Exploitation
Penetrating system defenses to gain unauthorized access.
Breaching
Staging
Exploitation
Reconnaissance
The constant change in personal habits and passwords to prevent anticipated events and exploitation.
Principle of Least Priviledge
Layering
Variety
Randomness
