Untitled Quiz

Cybersecurity threats originating from within an organization, with varying capabilities.

Different motivations drive insider threats, including financial gain, revenge, or carelessness.

A type of insider threat where sensitive data is stolen.

A type of insider threat where the system is damaged.

Using IT systems and applications without explicit company approval.

A security strategy that assumes no one is trustworthy unless verified.

Security measures to limit who can access sensitive company resources.

Training and educational programs to promote good cybersecurity practices.

The point where the False Acceptance Rate (FAR) and False Rejection Rate (FRR) are equal, representing a balance for optimal authentication.

The measure of how well a security system can accurately identify authorized users and prevent unauthorized access.

Using multiple authentication methods to increase security, like a password and fingerprint scan.

Mechanical locks with numbered buttons requiring a specific combination to unlock, often used in high-security areas.

Copying the data from an RFID or NFC card onto another device, allowing unauthorized access.

Using personal devices for work purposes.

The way an attacker gains unauthorized access to a system or network.

All points where an attacker can try to access a system or network.

Threats delivered via email, SMS, or instant messaging.

Impersonating a trusted entity to trick victims into revealing sensitive information.

Malicious code hidden within image files.

Malicious code disguised as legitimate documents or software.

Using voice calls to trick victims into revealing sensitive information.

Leaving malware-infected USB drives in public places to lure victims.

Networks lacking security measures to protect data.

An attack where an attacker pretends to be a legitimate device on the network.

An attack where an attacker gains access to other virtual networks on a network.

A set of vulnerabilities in Bluetooth technology allowing attackers to take over devices, spread malware, or intercept communications.

A Denial of Service attack targeting Bluetooth devices.

Technologies used to mislead, confuse, and divert attackers.

Manipulating people's psychology to gain unauthorized access to systems, data, or physical spaces.

The tactics social engineers use to exploit human psychology, including familiarity, consensus, authority, and urgency.

Pretending to be someone else, including impersonating brands, using fake websites, or targeting specific groups.

Creating a made-up scenario to manipulate targets into giving information or granting access.

A targeted phishing attack focusing on specific individuals or groups using personalized information to increase legitimacy.

A targeted phishing attack specifically aimed at high-profile individuals, often executives or CEOs.

Spreading misinformation and disinformation, impacting politics, economics, or public opinion.

A type of malware that encrypts your files and demands payment to decrypt them.

A network of compromised computers controlled remotely by attackers, often used for malicious purposes.

A computer infected with malware, controlled by an attacker without the owner's knowledge.

The central computer in a botnet that receives instructions and sends commands to the infected machines.

Don't pay the ransom, disconnect the infected device, notify authorities, and restore from backups.

The method an attacker uses to infiltrate a victim's system. Examples: unpatched software, phishing campaigns, USB drive installation.

Malicious code that attaches to clean files, spreads, and corrupts host files.

Standalone program that replicates and spreads to other computers without user interaction.

Malicious software disguised as legitimate software, allowing unauthorized access.

Encrypts user data and demands ransom for decryption.

Hides its presence and activities on a computer, operating at the OS level.

Allows unauthorized access to a system, bypassing normal security.

Records keystrokes, capturing passwords or sensitive information.

Monitors and gathers user/system information, sending it to attackers.

Infects the first sector of a hard drive, loading into memory during bootup.

Embedded inside documents, executing when the document is opened.

Infect executable files, affecting applications.

Infects both boot sectors and program files, attacking multiple parts of the system.

Uses encryption to avoid detection, hiding its malicious code.