Exam 1: The Threat Environment

ICMP Echo messages are often used in ________.

Identity theft is stealing credit card numbers.

A botmaster can remotely ________.

The definition of spam is "unsolicited commercial e-mail."

You accidentally find someone's password and use it to get into a system. This is hacking.

You receive an e-mail that seems to come from your bank. Clicking on a link in the message takes you to a website that seems to be your bank's website. However, the website is fake. This is called a ________ attack. (Pick the most precise answer.)

When considering penalties for hacking, motivation is irrelevant.

Generally speaking, script kiddies have high levels of technical skills.

Which of the following are examples of social engineering?

A ________ is a small program that, after installed, downloads a larger attack program.

Employees pose an increased risk to organizations as they ofter have access to sensitive parts of systems.

Mobile code usually is contained in webpages.

In fraud, the attacker deceives the victim into doing something against the victim's financial self-interest.

Most countermeasure controls are detective controls.

In response to a chain of attack, victims can often trace the attack back to the final attack computer.

The attack method used in the Sony data breaches was ________.

________ threaten to do at least temporary harm to the victim company's IT infrastructure unless the victim pays the attacker.

You have access to your home page on a server. By accident, you discover that if you hit a certain key, you can get into someone else's files. You spend just a few minutes looking around. This is hacking.

Which hacker group was likely involved in the Sony data breaches?

Most traditional external hackers do not cause extensive damage or commit theft for money.