Question 1

Mark receives an email from his bank asking him to update and verify his credit card details. He replies to the email with all the requested details. Mark later learns that the email was not actually sent by his bank and that the information he had shared has been misused. Mark is a victim of ________.
A) hacking
B) sniffing
C) data mining
D) phishing

Accepted Answer

Mark is a victim of phishing, which is when an attacker masquerades as a trustworthy entity and tricks the victim into giving away sensitive information.

Question 2

Which of the following is a synonym for phishing?
A) pretexting
B) email spoofing
C) hardening
D) system hacking

Accepted Answer

Phishing is the act of sending fraudulent emails that appear to come from a legitimate source in order to trick individuals into divulging confidential information such as passwords and credit card numbers. Email spoofing is a type of phishing where the attacker impersonates a trusted source in their email. Pretexting involves creating a false scenario to obtain information from an individual, while hardening refers to increasing the security of a system. System hacking involves gaining unauthorized access to a computer system.

Question 3

Explain the types of events that result in faulty service, a type of security loss.

Accepted Answer

Faulty service includes problems that result because of incorrect system operation. It could include incorrect data modification. It also could include systems that work incorrectly by sending wrong goods to a customer or the ordered goods to a wrong customer, inaccurately billing customers, or sending the wrong information to employees. Humans can inadvertently cause faulty service by making procedural mistakes. System developers can write programs incorrectly or make errors during installation of hardware, software programs, and data. Usurpation is also a type of faulty service. Faulty service can also result when a service is improperly restored during recovery from natural disasters.

Question 4

________ occurs when computer criminals invade a computer system and replace legitimate programs with their own unauthorized ones.
A) Usurpation
B) Cyber stalking
C) Spoofing
D) Sniffing

Accepted Answer

Usurpation is the act of taking over or replacing a legitimate program with an unauthorized one, often done by computer criminals in order to gain control of the system or steal information. Cyber stalking refers to the act of harassing or threatening someone online, spoofing involves tricking someone through the use of fake information or identities, and sniffing refers to intercepting and analyzing network traffic.

Question 5

A(n) ________ is a sophisticated, possibly long-running computer hack that is perpetrated by large, well-funded organizations like governments.
A) advanced persistent threat
B) identity threat
C) copyright theft
D) network sniffer attack

Accepted Answer

An advanced persistent threat (APT) is a type of computer attack that is carried out by a sophisticated, well-funded and often state-sponsored group of attackers. This type of attack is characterized by its persistence, meaning that it aims to remain undetected for long periods of time in order to collect valuable information or carry out other malicious activities. APTs are often aimed at high-value targets such as government organizations, defense contractors, and financial institutions.

Question 6

Advanced persistent threats can be a means to engage in cyber warfare and cyber espionage.

Accepted Answer

Advanced persistent threats (APTs) are a sophisticated and targeted form of cyber attack that can be used by nations or groups to engage in cyber warfare and cyber espionage. APTs involve a high level of skill, resources, and planning, and are designed to infiltrate and exploit a specific target over a prolonged period of time. APTs have been used by nation-states to steal intellectual property, conduct surveillance, and disrupt critical infrastructure in other countries. Therefore, the statement is true.

Question 7

A person calls the Stark residence and pretends to represent a credit card company. He asks Mrs. Stark to confirm her credit card number. This is an example of ________.
A) hacking
B) data mining
C) pretexting
D) sniffing

Accepted Answer

This is an example of pretexting, which is a social engineering technique that involves someone pretending to be someone else to obtain sensitive information. In this case, the person is pretending to be a representative of a credit card company to obtain Mrs. Stark's credit card number.

Question 8

Wardrivers are those who engage in phishing to obtain unauthorized access to data.

Accepted Answer

Wardrivers are individuals who use wireless devices to search for and access wireless networks without authorization, but they do not engage in phishing to obtain data.

Question 9

________ take computers with wireless connections through an area and search for unprotected wireless networks.
A) Wardrivers
B) Pretexters
C) Hackers
D) Phishers

Accepted Answer

Wardrivers take computers with wireless connections and drive through an area to search for unprotected wireless networks. Pretexters are individuals who use deception to obtain sensitive information, hackers gain unauthorized access to a system, and phishers use fake emails to trick individuals into revealing personal information.

Question 10

Incorrectly increasing a customer's discount is an example of incorrect data modification.

Accepted Answer

Incorrectly increasing a customer's discount means modifying data in a way that does not reflect accurate information, which is an example of incorrect data modification.

Question 11

Spoofing is a technique for intercepting computer communications.

Accepted Answer

Spoofing is a technique used to deceive or masquerade as another user, device, or network, typically to gain unauthorized access or to trick systems into thinking the communication is from a trusted source, rather than intercepting communications.

Question 12

________ is a technique for intercepting computer communications.
A) Spoofing
B) Phishing
C) Pretexting
D) Sniffing

Accepted Answer

Sniffing is the technique for intercepting computer communications. Spoofing is a type of attack where a malicious actor impersonates someone else's identity. Phishing is the act of trying to trick users into giving up sensitive information by posing as a trusted source. Pretexting is a form of social engineering where an attacker uses a fabricated scenario to gain sensitive information or access to a system. Sniffing allows attackers to monitor and potentially steal sensitive data being transmitted over a network.

Question 13

IP spoofing occurs when an intruder uses another site's IP address to masquerade as that other site.

Accepted Answer

IP spoofing is a technique used by hackers to impersonate a trusted source by using their IP address to gain access or launch an attack. It can be used for various malicious activities, including stealing data or launching a denial-of-service attack.

Question 14

A threat is a person or an organization that seeks to obtain or alter data illegally, without the owner's permission or knowledge.

Accepted Answer

This is the correct definition of a threat in the context of cybersecurity.

Question 15

________ occurs when a threat obtains data that is supposed to be protected.
A) Unauthorized data disclosure
B) Incorrect data modification
C) Faulty service
D) Denial of service

Accepted Answer

Unauthorized data disclosure occurs when a threat gains access to data that should be protected, potentially exposing sensitive or confidential information to unauthorized parties. Incorrect data modification, faulty service, and denial of service all describe different types of security breaches.

Question 16

A ________ pretends to be a legitimate company and sends emails requesting confidential data.
A) hacker
B) phisher
C) wardriver
D) sniffer

Accepted Answer

A phisher is a type of cybercriminal who creates fake emails, websites, or other digital communications to trick people into giving away sensitive information such as passwords, Social Security numbers, or credit card numbers. They often use social engineering tactics to make their message seem urgent or important, and they may even use logos or branding from legitimate companies to make their messages seem more trustworthy. It is important to be aware of the tactics that phishers use and to be cautious whenever you receive an unsolicited email or message asking for personal information.

Question 17

Which of the following occurs when millions of bogus service requests flood a Web server and prevent it from servicing legitimate requests?
A) spoofing
B) incorrect data modification
C) usurpation
D) denial of service

Accepted Answer

Denial of service (DoS) occurs when a large number of illegitimate requests are sent to a Web server, which prevents legitimate requests from being serviced. This can often result in the server crashing or becoming unresponsive.

Question 18

Breaking into computers, servers, or networks to steal proprietary and confidential data is referred to as ________.
A) pretexting
B) spoofing
C) hacking
D) phishing

Accepted Answer

Hacking specifically refers to unauthorized access to computer systems, networks, or servers, often with the intention of stealing confidential or proprietary information. Pretexting, spoofing, and phishing are all related to social engineering attacks, but do not necessarily involve breaking into computer systems.

Question 19

A(n) ________ is a measure that individuals or organizations take to block a threat from obtaining an asset.
A) denial of service
B) safeguard
C) information silo
D) third-party cookie

Accepted Answer

A safeguard is a measure taken by individuals or organizations to protect an asset from threats. It can be a physical barrier, a software program, a set of procedures, or a combination of these. It is designed to prevent unauthorized access to an asset or to limit the damage that can be caused by a threat. A denial of service is an attack that makes a resource unavailable to its intended users. An information silo is a situation where information is not shared between different departments or groups in an organization. A third-party cookie is a cookie that is set by a website other than the one that the user is visiting.

Question 20

Pretexting occurs when someone deceives by pretending to be someone else.

Accepted Answer

Pretexting is a form of social engineering where the attacker pretends to be someone else (such as a person in authority or a trusted entity) to obtain sensitive information from the victim.

Quiz 10: Information Systems Security

Which of the following is a synonym for phishing?

Explain the types of events that result in faulty service, a type of security loss.

________ occurs when computer criminals invade a computer system and replace legitimate programs with their own unauthorized ones.

A(n) ________ is a sophisticated, possibly long-running computer hack that is perpetrated by large, well-funded organizations like governments.

Advanced persistent threats can be a means to engage in cyber warfare and cyber espionage.

A person calls the Stark residence and pretends to represent a credit card company. He asks Mrs. Stark to confirm her credit card number. This is an example of ________.

Wardrivers are those who engage in phishing to obtain unauthorized access to data.

________ take computers with wireless connections through an area and search for unprotected wireless networks.

Incorrectly increasing a customer's discount is an example of incorrect data modification.

Spoofing is a technique for intercepting computer communications.

________ is a technique for intercepting computer communications.

IP spoofing occurs when an intruder uses another site's IP address to masquerade as that other site.

A threat is a person or an organization that seeks to obtain or alter data illegally, without the owner's permission or knowledge.

________ occurs when a threat obtains data that is supposed to be protected.

A ________ pretends to be a legitimate company and sends emails requesting confidential data.

Which of the following occurs when millions of bogus service requests flood a Web server and prevent it from servicing legitimate requests?

Breaking into computers, servers, or networks to steal proprietary and confidential data is referred to as ________.

A(n) ________ is a measure that individuals or organizations take to block a threat from obtaining an asset.

Pretexting occurs when someone deceives by pretending to be someone else.