Cybersecurity and Network Attacks Quiz

Malicious software designed to harm computer systems, such as viruses, worms, trojans, ransomware, and spyware.

A type of malware that encrypts data and demands payment to restore access. It often targets organizations and critical infrastructure.

Stealing personal information, like Social Security numbers and credit card details, to commit fraud.

Overloading a network, website, or service with traffic to make it unavailable to users.

Using the internet or other digital means to harass, threaten, or stalk someone through repeated and intrusive communication.

Any deceitful practice carried out over the internet to gain something of value, like financial gain or sensitive information. Examples include online scams, auction fraud, and credit card fraud.

Unauthorized access to or copying of someone’s creative works, such as software, music, movies, or patents, often for illegal distribution or financial gain.

The use of digital platforms to produce, distribute, or access illegal content involving the exploitation of minors, such as child pornography.

A set of ideas and principles that explain the causes of crime, the criminal justice system, and how society responds to crime.

A theory that explains criminal behavior based on the intersection of a motivated offender, a suitable target, and the absence of capable guardians.

In the context of cybercrime, a motivated offender could be a hacker, cybercriminal, or malicious insider who seeks financial gain, data theft, or disruption.

In the digital realm, a suitable target includes individuals or organizations with valuable data, weak security practices, or system vulnerabilities (like unpatched software or weak passwords).

Robust cybersecurity measures like firewalls, encryption, multi-factor authentication, and security awareness training can serve as capable guardians.

A theory that posits that learning is influenced by environmental observation, cognitive retention, reproduction of learned behaviors, and reinforcement from the environment.

In cybercrime, this theory suggests that individuals learn to engage in hacking or other malicious activities by observing others, retaining the information, practicing the techniques, and being reinforced through success or recognition.

A sub-theory that focuses on how a victim's actions or behaviors might contribute to their becoming a victim of crime.

Legal frameworks covering online activities like internet use, software, and digital communication.

Laws aimed at preventing and punishing cybercrime, including offenses targeting computers & data.

Ensuring consistency and compatibility between different cyber laws across countries.

Legal provisions for protecting systems & information from cyberattacks.

Deception and fraud using digital means, often involving financial gain.

Terrorist activities conducted through digital platforms.

Cybercrime law plays a crucial role in establishing online behavior standards, preventing harm, and facilitating international cooperation.

An attack that aims to prevent legitimate users from accessing a system resource by overloading its resources with a flood of data packets.

A subcategory of DoS attack that utilizes multiple computers to overwhelm a target system.

A type of DoS attack that focuses on consuming all available network bandwidth, preventing users from accessing the target system.

A type of DoS attack that exploits weaknesses in applications or operating systems to cause server crashes or failures.

A type of DoS attack that exploits vulnerabilities in network protocols to consume system resources, like CPU or memory.

A type of DoS attack that uses fragmented packets to overwhelm a system's resources, causing it to become unavailable.

A type of DoS attack that sends a large number of ICMP echo requests to a target system, causing it to become overwhelmed and unavailable.

A type of DoS attack that sends a SYN packet to a server, but never responds to the server's SYN-ACK packet, causing the server to exhaust its resources.

A type of DoS attack where specially crafted packets with overlapping fragments are sent to the target, causing the network device or server to crash.

A type of DoS attack that involves sending ICMP echo requests with the victim's IP as the source address to a network's broadcast address. This forces all devices in the network to send ICMP echo replies to the victim, overwhelming it with traffic.

A standardized scoring system used to evaluate vulnerabilities based on factors like exploitability, impact, and ease of remediation. It assigns a numerical score to vulnerabilities, helping organizations prioritize their responses.

A risk assessment model that evaluates potential threats based on five criteria: Damage potential, Reproducibility, Exploitability, Affected users, and Discoverability. It assigns a score to each criterion, enabling prioritization of threats based on their severity.

The process of systematically identifying and analyzing potential security threats to a system. It involves understanding the system's architecture, identifying vulnerabilities, and assessing the likelihood and impact of threats.

A threat modeling methodology that focuses on six specific categories of threats: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Elevation of privilege.

A structured methodology for threat analysis that involves identifying assets, defining threats, analyzing vulnerabilities, and proposing mitigations. It provides a framework for systematically evaluating security risks.

It involves representatives from various disciplines, like developers, security professionals, and business stakeholders, to ensure a comprehensive understanding of the system and its security requirements.

Integrating threat modeling early in the development lifecycle allows for early identification and mitigation of security risks. This helps prevent costly fixes later in the process.

Threat modeling is an iterative process that requires continuous updates and refinement to account for changes in the system and emerging threats. Regular review and updates ensure the ongoing effectiveness of security measures.