Cybercrime and Economics

What is the estimated annual cost of cybercrime to the global economy according to Statista in 2023?

USD1.16 Trillion (correct)
USD450 Billion
USD2 Trillion
USD400 Billion

What is the concept that suggests that convenience often takes priority over concerns or problems?

High returns on low risk
Convenience Overshoot (correct)
Wild West
Low-hanging fruit

What is the primary reason why cybercrime is so lucrative?

Lack of legal consequences
High returns on low risk (correct)
Easy to carry out attacks
Outdated laws

Why was the internet and associated technologies not designed with security in mind?

Security was not a concern at the time (C) Signup and view all the answers

What is the GDP of the United States according to the World Bank in 2017?

USD18.569 Trillion (C) Signup and view all the answers

What is the purpose of a systematic assessment of damages in a court of law?

To determine the damages caused by a cybercriminal (A) Signup and view all the answers

What is the purpose of a penetration test?

To analyze a company's security policy and procedures (B) Signup and view all the answers

What is the term used to describe individuals who break into computer systems or networks without authorization?

Hackers (A) Signup and view all the answers

What is the role of an ethical hacker?

To perform penetration tests for companies (A) Signup and view all the answers

What is the term used to describe individuals who break into systems to steal or destroy data?

Crackers (B) Signup and view all the answers

What is the term used to describe a security test that includes analyzing a company's security policy and procedures?

Penetration test (C) Signup and view all the answers

What is the primary goal of a penetration tester?

To discover vulnerabilities in a network (A) Signup and view all the answers

What is the name of the certification that is considered to be the most advanced?

Certified Information Systems Security Professional (CISSP) (D) Signup and view all the answers

What is the purpose of the TCP three-way handshake?

To establish a connection between two computers (B) Signup and view all the answers

What is the primary function of the Internet layer in the TCP/IP protocol stack?

To route packets to their destination address (C) Signup and view all the answers

What is the difference between a Class A and Class B IP address?

Class A has a larger number of hosts (A) Signup and view all the answers

What is the purpose of the subnet mask?

To determine the destination computer’s network address (D) Signup and view all the answers

What is the primary difference between IPv4 and IPv6?

IPv6 has a larger address space (D) Signup and view all the answers

What is the purpose of the Transport layer in the TCP/IP protocol stack?

To encapsulate data into segments (C) Signup and view all the answers

What is the primary goal of a security tester?

To discover vulnerabilities in a network (C) Signup and view all the answers

What is the purpose of the Application layer in the TCP/IP protocol stack?

To provide a front end to the lower-layer protocols (C) Signup and view all the answers

What is the primary goal of a Distributed Denial-of-Service (DDoS) attack?

To flood a network with packets, causing a loss of bandwidth and speed (D) Signup and view all the answers

What is the main vulnerability exploited in a Buffer Overflow attack?

Poorly written code that doesn't check for memory space use (C) Signup and view all the answers

What is the primary purpose of a keylogger software?

To capture keystrokes on a computer (A) Signup and view all the answers

What is the term for sending packets with false source addresses?

IP spoofing (B) Signup and view all the answers

What is the main goal of footprinting?

To gather information about a company's network (A) Signup and view all the answers

What is the term for a program that allows an attacker to join a TCP session?

Session hijacking (C) Signup and view all the answers

What is the main benefit of using Paros for footprinting?

It can gather information about a company's network (D) Signup and view all the answers

What is the primary purpose of a Trojan program?

To disguise malicious code as legitimate software (A) Signup and view all the answers

What is the main purpose of using HTTP for security testing?

To gather information about a Web server (D) Signup and view all the answers

What is the primary purpose of physical security measures?

To protect against insider threats (C) Signup and view all the answers

What is the purpose of verifying logon and password information?

To store sensitive information securely (A) Signup and view all the answers

Why do attacks on Web applications differ depending on the platform and technology?

Because different platforms have different vulnerabilities (B) Signup and view all the answers

What is the purpose of footprinting in Web application security?

To discover the OS and DBMS of a system (B) Signup and view all the answers

Why do security testers and attackers use various tools?

To test or attack a system after discovering vulnerabilities (D) Signup and view all the answers

What is a characteristic of dynamic Web pages?

They are created using CGI, ASP, etc. (D) Signup and view all the answers

What is a commonality among different Web application platforms?

They are all vulnerable to attacks (C) Signup and view all the answers