Question 1

The dominant type of attacker today is the ________.

Accepted Answer

A)  wizard hacker 
B)  IT or security employer 
C)  national government 
D)  career criminal 
A)  wizard hacker 
B)  IT or security employer 
C)  national government 
D)  career criminal

Question 2

Most traditional external attackers were heavily motivated by ________.

Accepted Answer

A)  the thrill of breaking in 
B)  making money through crime 
C)  Both A and B 
D)  Neither A nor B 
A)  the thrill of breaking in 
B)  making money through crime 
C)  Both A and B 
D)  Neither A nor B

Question 3

Carding is more serious than identity theft.

Accepted Answer

A) True 
 B)False

Question 4

Traditional hackers are motivated by ________.

Accepted Answer

A)  thrill 
B)  validation of power 
C)  doing damage as a by-product 
D)  All of the above 
A)  thrill 
B)  validation of power 
C)  doing damage as a by-product 
D)  All of the above

Question 5

A Trojan horse is a program that hides itself by deleting a system file and taking on the system file's name.

Accepted Answer

A) True 
 B)False

Question 6

Mobile code usually is delivered through ________.

Accepted Answer

A)  webpages 
B)  e-mail 
C)  directly propagating worms 
D)  All of the above 
A)  webpages 
B)  e-mail 
C)  directly propagating worms 
D)  All of the above

Question 7

Sending packets with false IP source addresses is called ________.

Accepted Answer

A)  a IP address scanning attack 
B)  IP address spoofing 
C)  a port scanning attack 
D)  None of the above. 
A)  a IP address scanning attack 
B)  IP address spoofing 
C)  a port scanning attack 
D)  None of the above.

Question 8

________ consists of activities that violate a company's IT use policies or ethics policies.

Accepted Answer

A)  Fraud 
B)  Extortion 
C)  Hacking 
D)  Abuse 
A)  Fraud 
B)  Extortion 
C)  Hacking 
D)  Abuse

Question 9

Cybercriminals avoid black market forums.

Accepted Answer

A) True 
 B)False

Question 10

When a company visits a website to collect public information about a competitor, this is a form of trade secret espionage.

Accepted Answer

A) True 
 B)False

Question 11

Attackers cannot use IP address spoofing in port scanning attack packets.

Accepted Answer

A) True 
 B)False

Question 12

You receive an e-mail that seems to come from a frequent customer. It contains specific information about your relationship with the customer. Clicking on a link in the message takes you to a website that seems to be your customer's website. However, the website is fake. This is ________. (Pick the most precise answer.)

Accepted Answer

A)  social engineering 
B)  a hoax 
C)  phishing 
D)  spear fishing 
A)  social engineering 
B)  a hoax 
C)  phishing 
D)  spear fishing

Question 13

Downloading pornography can lead to sexual harassment lawsuits.

Accepted Answer

A) True 
 B)False

Question 14

Why did hackers attack Sony Corp?

Accepted Answer

A)  To test their technical skills 
B)  Because Sony was suing a fellow hacker 
C)  As part of a larger cyberwar exercise 
D)  Because Sony put a malicious rootkit on certain music disks 
A)  To test their technical skills 
B)  Because Sony was suing a fellow hacker 
C)  As part of a larger cyberwar exercise 
D)  Because Sony put a malicious rootkit on certain music disks

Question 15

Which of the following are ways that trade secret espionage occur?

Accepted Answer

A)  Theft through interception 
B)  By bribing an employee 
C)  None of the above 
D)  All of the above 
A)  Theft through interception 
B)  By bribing an employee 
C)  None of the above 
D)  All of the above

Question 16

Terrorists can use IT to ________.

Accepted Answer

A)  destroy utilities 
B)  finance their terrorism 
C)  Both A and B 
D)  Neither A nor B 
A)  destroy utilities 
B)  finance their terrorism 
C)  Both A and B 
D)  Neither A nor B

Question 17

A(n) ________ attack requires a victim host to prepare for many connections, using up resources until the computer can no longer serve legitimate users. (Choose the most specific choice.)

Accepted Answer

A)  DoS 
B)  directly-propagating worm 
C)  distributed malware 
D)  SYN Flooding 
A)  DoS 
B)  directly-propagating worm 
C)  distributed malware 
D)  SYN Flooding

Question 18

What were the approximate dollar losses for the series of data breaches against Sony Corp?

Accepted Answer

A)  $54 million 
B)  $171 million 
C)  $254 million 
D)  $1.6 billion 
A)  $54 million 
B)  $171 million 
C)  $254 million 
D)  $1.6 billion

Question 19

In ________, the perpetrator tries to obtain money or other goods by threatening to take actions that would be against the victim's interest.

Accepted Answer

A)  fraud 
B)  extortion 
C)  hacking 
D)  abuse 
A)  fraud 
B)  extortion 
C)  hacking 
D)  abuse

Question 20

Someone sends you a "game." When you run it, it logs you into an IRS server. This is hacking.

Accepted Answer

A) True 
 B)False

The dominant type of attacker today is the ________.

Most traditional external attackers were heavily motivated by ________.

Carding is more serious than identity theft.

Traditional hackers are motivated by ________.

A Trojan horse is a program that hides itself by deleting a system file and taking on the system file's name.

Mobile code usually is delivered through ________.

Sending packets with false IP source addresses is called ________.

________ consists of activities that violate a company's IT use policies or ethics policies.

Cybercriminals avoid black market forums.

When a company visits a website to collect public information about a competitor, this is a form of trade secret espionage.

Attackers cannot use IP address spoofing in port scanning attack packets.

Downloading pornography can lead to sexual harassment lawsuits.

Why did hackers attack Sony Corp?

Which of the following are ways that trade secret espionage occur?

Terrorists can use IT to ________.

A(n) ________ attack requires a victim host to prepare for many connections, using up resources until the computer can no longer serve legitimate users. (Choose the most specific choice.)

What were the approximate dollar losses for the series of data breaches against Sony Corp?

In ________, the perpetrator tries to obtain money or other goods by threatening to take actions that would be against the victim's interest.

Someone sends you a "game." When you run it, it logs you into an IRS server. This is hacking.

Planning and Policy

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 1: The Threat Environment

The dominant type of attacker today is the ________.

Most traditional external attackers were heavily motivated by ________.

Carding is more serious than identity theft.

Traditional hackers are motivated by ________.

A Trojan horse is a program that hides itself by deleting a system file and taking on the system file's name.

Mobile code usually is delivered through ________.

Sending packets with false IP source addresses is called ________.

________ consists of activities that violate a company's IT use policies or ethics policies.

Cybercriminals avoid black market forums.

When a company visits a website to collect public information about a competitor, this is a form of trade secret espionage.

Attackers cannot use IP address spoofing in port scanning attack packets.

Downloading pornography can lead to sexual harassment lawsuits.

Why did hackers attack Sony Corp?

Which of the following are ways that trade secret espionage occur?

Terrorists can use IT to ________.

A(n) ________ attack requires a victim host to prepare for many connections, using up resources until the computer can no longer serve legitimate users. (Choose the most specific choice.)

What were the approximate dollar losses for the series of data breaches against Sony Corp?

In ________, the perpetrator tries to obtain money or other goods by threatening to take actions that would be against the victim's interest.

Someone sends you a "game." When you run it, it logs you into an IRS server. This is hacking.

Planning and Policy

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters