WorksheetsUnderstanding Cybersecurity Threats
Total questions: 20
Worksheet time: 10mins
What is a scriptkiddie?
An expert hacker who creates their own tools from scratch.
A scriptkiddie is a novice hacker who uses pre-written scripts or tools to exploit vulnerabilities.
A security professional who tests systems for vulnerabilities.
A type of malware that targets novice users.
How do hacktivists typically operate?
Hacktivists focus on traditional media campaigns to spread their messages.
Hacktivists operate by using digital tools to promote political agendas through activities like website defacement and data breaches.
Hacktivists primarily operate through physical protests and rallies.
Hacktivists usually work in secret without any digital tools.
What motivates nationstate actors in cyber attacks?
Political objectives, economic gain, national security interests, and disruption of adversaries.
Environmental concerns
Personal vendettas
Cultural exchanges
What distinguishes black hat hackers from other types?
Black hat hackers engage in illegal activities for personal gain.
Black hat hackers work exclusively for non-profit organizations.
Black hat hackers are ethical hackers who help organizations.
Black hat hackers only target government systems.
What role do white hat hackers play in cybersecurity?
White hat hackers help secure systems by identifying vulnerabilities and improving cybersecurity.
White hat hackers are hired to attack systems for profit.
White hat hackers create malware to exploit systems.
White hat hackers focus solely on data theft and espionage.
Can grey hat hackers be considered ethical?
Yes, grey hat hackers can be considered ethical depending on their intentions and actions.
No, grey hat hackers cannot be ethical under any circumstances.
Yes, grey hat hackers are illegal by definition.
No, grey hat hackers are always unethical.
What is a zero day vulnerability?
A zero day vulnerability is an unpatched security flaw in software that is exploited by attackers before the vendor is aware of it.
A zero day vulnerability is a type of malware that spreads through email attachments.
A zero day vulnerability is a security flaw that has been patched by the vendor.
A zero day vulnerability is a security feature that protects software from attacks.
How do scriptkiddies acquire their hacking tools?
They purchase tools from local electronics stores.
Scriptkiddies acquire their hacking tools from online forums, dark web marketplaces, and open-source repositories.
Scriptkiddies create their own tools from scratch.
Hacking tools are only available through government agencies.
What are some common targets for hacktivists?
Local community groups
Non-profit organizations
Educational institutions promoting free speech
Government agencies, corporations, and institutions promoting censorship or human rights violations.
How do nationstate actors gather intelligence?
Using only satellite imagery
Relying solely on social media posts
Conducting random surveys without analysis
Nation-state actors gather intelligence using SIGINT, HUMINT, IMINT, OSINT, and cyber operations.
What are the legal implications for black hat hackers?
Black hat hackers only face civil lawsuits for their actions.
Black hat hackers are rewarded with government contracts.
Black hat hackers face criminal charges, fines, and imprisonment for illegal activities.
Black hat hackers are immune to prosecution under international law.
In what scenarios might a white hat hacker break the law?
Performing hacking activities for personal gain.
Accessing systems only to report vulnerabilities without permission.
Conducting security assessments without any prior consent.
Unauthorized access or exceeding authorized activities during security assessments.
What ethical dilemmas do grey hat hackers face?
Grey hat hackers only face technical challenges.
Grey hat hackers face dilemmas regarding legality vs. ethics, consent for vulnerability disclosure, and potential harm from their actions.
Grey hat hackers are always legally protected.
Grey hat hackers do not consider the impact of their actions.
How can organizations protect against zero day attacks?
Implement a multi-layered security approach including regular updates, intrusion detection, application whitelisting, employee training, and threat intelligence.
Use only firewalls without any additional security measures
Disable all software updates to avoid disruptions
Rely solely on antivirus software for protection
What is the impact of scriptkiddies on cybersecurity?
Scriptkiddies negatively impact cybersecurity by increasing the volume of attacks and exploiting vulnerabilities, which can overwhelm security measures.
Scriptkiddies have no effect on cybersecurity measures.
Scriptkiddies enhance cybersecurity by patching vulnerabilities.
Scriptkiddies primarily focus on ethical hacking and improving security.
What techniques do hacktivists use to raise awareness for their causes?
Hacktivists primarily use social media campaigns and online petitions.
Hacktivists focus on creating documentaries to spread their message.
Hacktivists utilize digital graffiti, website defacement, and data leaks to draw attention.
Hacktivists rely on traditional advertising methods.
What distinguishes ethical hackers from black hat hackers?
Ethical hackers operate without any legal restrictions.
Ethical hackers are authorized to test systems and improve security, while black hat hackers engage in illegal activities.
Ethical hackers do not require any technical skills.
Ethical hackers only work for government agencies.
What are the potential consequences for organizations that fail to address cybersecurity vulnerabilities?
Organizations will receive government grants for improvement.
Organizations will be immune to any attacks.
Organizations may face financial losses, reputational damage, and legal repercussions.
Organizations will only face minor inconveniences.
What are the primary motivations behind the actions of hacktivists?
Hacktivists are motivated by personal fame and recognition.
Hacktivists operate solely for entertainment purposes.
Hacktivists aim to promote social change and raise awareness about political issues.
Hacktivists seek financial gain through their activities.
What are the common characteristics of a phishing attack?
Phishing attacks require the attacker to be physically present.
Phishing attacks are always conducted through phone calls.
Phishing attacks are only targeted at government officials.
Phishing attacks often involve unsolicited emails that appear to be from legitimate sources.
