A (a)   is an app, willingly or unwillingly downloaded, that records your keystrokes

A backdoor is a mechanism in which someone gains access to a system without going through a normal (a)   process.

(a)   is voice phishing, usually done through a pre-recorded message that attempts to get someone to give up personal information.

A (a)   attack is an attack done to where sites that users are known to visit are infected.

The basis of a DoS attack is to (a)   a network so that its components cannot function properly.

In ___, the trust a user’s browser has in a website is exploited. In ____, the trust a website has in a user’s browser is exploited.

(a)  

(a)   is the act of changing a domain’s name registration without the permission of the actual domain registrant.

In (a)   , a user is tricked into clicking what looks to be a good link, but is, in fact, a malicious link.

In (a)   , an attacker gains a legitimate MAC address from a device and then assigns the MAC address to itself and convinces the network that the MAC address is still coming from the original device.

A (a)   access point is a wireless access point that has been brought into a network without proper permissions from the network administrators

In a (a)   attack, an attacker takes a user’s wireless connection and deauthenticates it.

A (a)   attack is an attack in which attackers manually guess a password as many times as it takes until the password is cracked.

(a)   are unskilled attackers and will only take advantage of vulnerabilities that are easy to find.

______ actors are far more dangerous than ______ actors.

(a)  

In (a)   reconnaissance, scanners, software, and other similar tools are used to get information on an entry

(a)   is a type of testing in which people who are testing your system do not know the system

The idea of a vulnerability scan is that it should test for vulnerabilities without affecting the current (a)   of a network.

Once a system gets old and reaches the (a)   stage, vendors will no longer support it.

Errors in an app should be handled (a)  

An integer (a)   occurs when an integer is entered into a field in an app or a calculation is made and the result is too big for its allocated memory space.

A zero day attack exposes a software vulnerability (a)   to the software developers.

Malware that has to be executed at least once before it can propagate itself: (a)  

A type of malware that multiple areas of a system, like multiple folders or a folder and a boot sector. This has to be executed at least once before it can propagate itself: (a)  

Malware that is tough to detect and pull apart as it will often have encryption and other protective means: (a)  

Malware that tends to morph as it spreads. Often the file name changes: (a)  

Malware that infects a system, and the person or entity doing the infecting will be happy to clear the infection for you if you pay a ransom: (a)  

Malware that encrypts your data, scrambling it and making it useless until you obtain (purchase) a decryption key: (a)  

Malware that can carry malicious code all by itself, and it can replicate itself: (a)  

Malware that can appear as a pop-up on a site saying, download this and your system will be clean! But instead of cleaning out viruses or other malware, it cleans out important system files: (a)  

This is software that acts as a remote administration tool: (a)  

Malware that can gain administrative control over a system and can attack startup items such as the BIOS, kernel, and boot loader: (a)  

An app, willingly or unwillingly downloaded, that records your keystrokes: (a)  

Malware that shows pop-up advertisements based on places users have visited, without a user’s authorization: (a)  

Malware that tracks users’ habits without their consent: (a)  

A computer that has been taken over and is now under the control of an attacker. It can then be used to launch further attacks, especially on a network: (a)  

A type of malware that is set to trigger other malware on a date with some significance: (a)  

A mechanism in which someone gains access to a system without going through a normal authentication process: (a)  

The act of getting users to reveal confidential personal information when asked, usually through phone calls, email, or on websites: (a)  

A means by which someone is trying to get personal information from you, usually in the form of an email: (a)  

A type of phishing that targets specific individuals or groups: (a)  

A type of spear phishing which targets a very specific type of person, usually a senior executive or someone with a similar high-profile status: (a)  

Voice phishing, usually done through a pre-recorded message trying to get you to give up your name and account number: Vishin

(a)  

A physical security problem similar to tailgating with the exception that the first person invites the second person in without proper authorization: (a)  

A person that acts as an imposter. One example is of someone impersonating a customer service representative and attempting to get customers’ passwords or other information: (a)  

The act of literally going through trash and looking for valuable information (documents) people throw out: (a)  

An attack in which an individual or group physically watches someone enter their username and password: (a)  

A fake attack that can look like phishing. This often costs people time and creates security holes: (a)  

An attack that infects sites which users are known to frequently visit: (a)  

A “help desk supervisor” convinces someone to give up confidential information, such as a password: (a)  

A group of imposters calls as IRS agents, threatening to arrest people if they do not pay what they are told they owe in taxes right away: (a)  

An imposter tells an unsuspecting user, “Hey, your coworkers gave me this information, so why don’t you cooperate as well?” This is known as: (a)   Consensus

A supposed fundraiser calls and tells someone, “Hey, if you give me your credit card number and donate $100 right now, I’ll send you this awesome tote bag. But I only have one left, so it’s either now or never.” (a)  

A consultant or group of consultants comes into a company for a special project. However, at the same time, they gain access to restricted areas, and then they use that information later to launch an attack: (a)  

If someone is friends with a user, that someone can get that user’s information more easily than if they weren’t friends: (a)  

A scammer calls and says, “You have a virus on your machine, and the only way I can clean it off is to be able to log in as you. So, give me your password right now!” This is known as: (a)