Aditya is the security manager for a mid-sized business. The company

has suffered several serious data losses when laptops were stolen. Aditya

decides to implement full disk encryption on all laptops. What risk

response did Aditya take?

Purchasing an insurance policy is an example of the ____________ risk

management strategy.

True or False? In a masquerade attack, one user or computer pretends to

be another user or computer.

True or False? Anti-malware programs and firewalls cannot detect most

phishing scams because the scams do not contain suspect code.

In which type of attack does the attacker attempt to take over an existing

connection between two systems?

True or False? Corrective controls are implemented to address a threat in

place that does not have a straightforward risk-mitigating solution.

A hacker has stolen logon IDs and passwords. The hacker is now

attempting to gain unauthorized access to a public-facing web application

by using the stolen credentials one by one. What type of attack is taking

place?

Forensics and incident response are examples of __________ controls.

True or False? Impact refers to the amount of risk or harm caused by a

threat or vulnerability that is exploited by a perpetrator.

True or False? In a watering-hole attack, a targeted user is lured to a

commonly visited website on which malicious code has been planted.

True or False? A man-in-the-middle attack takes advantage of the

multihop process used by many types of networks.

Barry discovers that an attacker is running an access point in a building

adjacent to his company. The access point is broadcasting the security

set identifier (SSID) of an open network owned by the coffee shop in his

lobby. Which type of attack is likely taking place?

True or False? Bluejacking is an attack in which wireless traffic is sniffed

between Bluetooth devices.

Adam is evaluating the security of a web server before it goes live. He

believes that an issue in the code allows a cross-site scripting attack

against the server. What term describes the issue that Adam discovered?

Brian notices an attack taking place on his network. When he digs deeper,

he realizes that the attacker has a physical presence on the local network

and is forging Media Access Control (MAC) addresses. Which type of

attack is most likely taking place?

True or False? A social engineering consensus tactic relies on the

position that "everyone else has been doing it" as proof that it is okay or

acceptable to do.

True or False? Preventive controls merely attempt to suggest that a

subject not take a specific action, whereas corrective controls do not allow

the action to occur.

An attacker attempting to break into a facility pulls the fire alarm to distract

the security guard manning an entry point. Which type of social

engineering attack is the attacker using?

True or False? A phishing attack "poisons" a domain name on a domain

name server (DNS).