Untitled Quiz

<p>Copying data from RFID or NFC cards (A)</p> Signup and view all the answers

<p>Near Field Communication (NFC) (A)</p> Signup and view all the answers

<p>Disconnect the infected machine from the network (B)</p> Signup and view all the answers

<p>A network of compromised devices controlled by an attacker (C)</p> Signup and view all the answers

<p>A compromised device used for remote commands (D)</p> Signup and view all the answers

<p>Paying does not ensure data recovery (A)</p> Signup and view all the answers

<p>Stockpiling physical backups (D)</p> Signup and view all the answers

<p>Financial gain from selling sensitive data (A)</p> Signup and view all the answers

<p>Implement a zero-trust architecture (D)</p> Signup and view all the answers

<p>Use of IT resources without organizational approval (B)</p> Signup and view all the answers

<p>Data Theft (A)</p> Signup and view all the answers

<p>Desire for organizational improvement (D)</p> Signup and view all the answers

<p>Insider threats (C)</p> Signup and view all the answers

<p>Lack of awareness of cybersecurity best practices (D)</p> Signup and view all the answers

<p>Implement clear policies on technology usage (A)</p> Signup and view all the answers

<p>To exploit human psychology for unauthorized access (A)</p> Signup and view all the answers

<p>Technical Knowledge (A)</p> Signup and view all the answers

<p>Creating a fabricated scenario to manipulate targets (B)</p> Signup and view all the answers

<p>Voice phishing conducted over phone calls (B)</p> Signup and view all the answers

<p>Relying solely on user self-education (C)</p> Signup and view all the answers

<p>To prevent unauthorized RFID scanning (C)</p> Signup and view all the answers

<p>High-profile individuals or executives (B)</p> Signup and view all the answers

<p>Spear Phishing (A)</p> Signup and view all the answers

<p>Worms are standalone and self-replicating. (A)</p> Signup and view all the answers

<p>Ransomware (C)</p> Signup and view all the answers

<p>It disguises itself as harmless software to gain unauthorized access. (B)</p> Signup and view all the answers

<p>Software that captures keystrokes and sensitive information. (D)</p> Signup and view all the answers

<p>A virus that rewrites itself to avoid detection. (C)</p> Signup and view all the answers

<p>Operating system vulnerabilities. (A)</p> Signup and view all the answers

<p>Account lockouts. (D)</p> Signup and view all the answers

<p>Program Virus (A)</p> Signup and view all the answers

<p>To encrypt data and demand payment for decryption. (A)</p> Signup and view all the answers

<p>Malware designed to hide its presence and activities. (B)</p> Signup and view all the answers

<p>Executes malicious actions based on a triggering event. (B)</p> Signup and view all the answers

<p>A virus needs a host file to spread, while worms spread independently. (A)</p> Signup and view all the answers

<p>Consumes system resources without providing value. (B)</p> Signup and view all the answers

<p>To mislead and distract attackers (B)</p> Signup and view all the answers

<p>Voice calls that trick victims into sharing information (C)</p> Signup and view all the answers

<p>Points of unauthorized access into a system (C)</p> Signup and view all the answers

<p>To deter unauthorized access by creating physical barriers (B)</p> Signup and view all the answers

<p>Brute force (C)</p> Signup and view all the answers

<p>Honeypot (B)</p> Signup and view all the answers

<p>BlueBorne vulnerabilities (A)</p> Signup and view all the answers

<p>Utilizing access control vestibules (C)</p> Signup and view all the answers

<p>Blocking the camera's line of sight (C)</p> Signup and view all the answers

<p>To protect tangible assets from unauthorized access (D)</p> Signup and view all the answers

<p>Microwave Sensors (A)</p> Signup and view all the answers

<p>Restricting access and removing unnecessary software (C)</p> Signup and view all the answers

<p>To observe and report suspicious activities (B)</p> Signup and view all the answers

<p>Access control vestibule (C)</p> Signup and view all the answers

Cybersecurity threats originating from within an organization, with varying capabilities.

Different motivations drive insider threats, including financial gain, revenge, or carelessness.

A type of insider threat where sensitive data is stolen.

A type of insider threat where the system is damaged.

Using IT systems and applications without explicit company approval.

A security strategy that assumes no one is trustworthy unless verified.

Security measures to limit who can access sensitive company resources.

Training and educational programs to promote good cybersecurity practices.

The point where the False Acceptance Rate (FAR) and False Rejection Rate (FRR) are equal, representing a balance for optimal authentication.

The measure of how well a security system can accurately identify authorized users and prevent unauthorized access.

Using multiple authentication methods to increase security, like a password and fingerprint scan.

Mechanical locks with numbered buttons requiring a specific combination to unlock, often used in high-security areas.

Copying the data from an RFID or NFC card onto another device, allowing unauthorized access.

Using personal devices for work purposes.

The way an attacker gains unauthorized access to a system or network.

All points where an attacker can try to access a system or network.

Threats delivered via email, SMS, or instant messaging.

Impersonating a trusted entity to trick victims into revealing sensitive information.

Malicious code hidden within image files.

Malicious code disguised as legitimate documents or software.

Using voice calls to trick victims into revealing sensitive information.

Leaving malware-infected USB drives in public places to lure victims.

Networks lacking security measures to protect data.

An attack where an attacker pretends to be a legitimate device on the network.

An attack where an attacker gains access to other virtual networks on a network.

A set of vulnerabilities in Bluetooth technology allowing attackers to take over devices, spread malware, or intercept communications.

A Denial of Service attack targeting Bluetooth devices.

Technologies used to mislead, confuse, and divert attackers.

Manipulating people's psychology to gain unauthorized access to systems, data, or physical spaces.

The tactics social engineers use to exploit human psychology, including familiarity, consensus, authority, and urgency.

Pretending to be someone else, including impersonating brands, using fake websites, or targeting specific groups.

Creating a made-up scenario to manipulate targets into giving information or granting access.

A targeted phishing attack focusing on specific individuals or groups using personalized information to increase legitimacy.

A targeted phishing attack specifically aimed at high-profile individuals, often executives or CEOs.

Spreading misinformation and disinformation, impacting politics, economics, or public opinion.

A type of malware that encrypts your files and demands payment to decrypt them.

A network of compromised computers controlled remotely by attackers, often used for malicious purposes.

A computer infected with malware, controlled by an attacker without the owner's knowledge.

The central computer in a botnet that receives instructions and sends commands to the infected machines.

Don't pay the ransom, disconnect the infected device, notify authorities, and restore from backups.

The method an attacker uses to infiltrate a victim's system. Examples: unpatched software, phishing campaigns, USB drive installation.

Malicious code that attaches to clean files, spreads, and corrupts host files.

Standalone program that replicates and spreads to other computers without user interaction.

Malicious software disguised as legitimate software, allowing unauthorized access.

Encrypts user data and demands ransom for decryption.

Hides its presence and activities on a computer, operating at the OS level.

Allows unauthorized access to a system, bypassing normal security.

Records keystrokes, capturing passwords or sensitive information.

Monitors and gathers user/system information, sending it to attackers.

Infects the first sector of a hard drive, loading into memory during bootup.

Embedded inside documents, executing when the document is opened.

Infect executable files, affecting applications.

Infects both boot sectors and program files, attacking multiple parts of the system.

Uses encryption to avoid detection, hiding its malicious code.