_____ monitors your online activity and can log every key you press on your keyboard, as well as capture almost any of your data, including sensitive personal information such as your online banking details.

_____ designed to automatically deliver advertisements to a user, most often on a web browser.

____ used to gain unauthorized access by bypassing the normal authentication procedures to access a system.

_____ mainly consists of operating system style windows that pop up to warn you that your system is at risk and needs to run a specific program for it to return to normal operation.

____ takes advantage of software vulnerabilities to gain access to resources that normally shouldn’t be accessible (privilege escalation) and modify system files.

A computer infected by a ____ has to be wiped and any required software reinstalled.

____ when executed, replicates and attaches itself to other executable files, such as a document, by inserting its own code.

______ carries out malicious operations by masking its true intent. It might appear legitimate but is, in fact, very dangerous.

_____ do not self-replicate but act as a decoy to sneak malicious software past unsuspecting users.

____ are responsible for some of the most devastating attacks on the Internet.

Which is NOT a symptom of a Malware?

______ is the manipulation of people into performing actions or divulging confidential information.

This is when an attacker calls an individual and lies to them in an attempt to gain access to privileged data.

This is when an attacker quickly follows an authorized person into a secure, physical location.

This is when an attacker requests personal information from a person in exchange for something, like a free gift.

A ___ attack results in some sort of interruption of network service to users, devices or applications.

A type of DoS attack where a network, host, or application is sent an enormous amount of data at a rate which it cannot handle.

A type of DoS attack where an attacker forwards packets containing errors that cannot be identified by an application.

This is where an attacker builds a network (botnet) of infected hosts called zombies, which are controlled by handler systems.

A ______ is a group of bots, connected through the Internet, that can be controlled by a malicious individual or group.

An on-path attack where cybercriminals takes control of a device without the user's knowledge.

____ is a type of attack used to take control over a user's mobile device.

____ attempts to gain access to a system by ‘spraying’ a few commonly used passwords across a large number of accounts.

This technique allows the perpetrator to remain undetected as they avoid frequent account lockouts.

A hacker systematically tries every word in a dictionary or a list of commonly used words as a password in an attempt to break into a password-protected account.

The simplest and most commonly used way of gaining access to a password-protected site.

An attacker uses all possible combinations of letters, numbers and symbols in the password space until they get it right.

An attacker finds a match from a dictionary of precomputed hashes, then they identify the password used to create the hash.

Plain text or unencrypted passwords can be easily read by other humans and machines by intercepting communications.

A multi-phase, long term, stealthy and advanced operation against a specific target.

This type of infiltration is usually well-funded and typically targets organizations or nations for business or political reasons.

A program written to take advantage of a known vulnerability is referred to as an ____

_____ are specific to device models and are not generally exploited through random compromising attempts.

The _____ vulnerability allowed attackers to gain control of enterprise-grade routers, such as the legacy Cisco ISR routers, from which they could monitor all network communications and infect other network devices.

A vulnerability occurs when data is written beyond the limits of a buffer.

Incoming data could have malicious content, designed to force the program to behave in an unintended way.

Developers should stick to using security techniques and libraries that have already been created, tested and verified and should not attempt to create their own security algorithms.

Many security vulnerabilities are created by the improper use of access controls.