When an attacker leaves a malware-infected USB drive in a public place hoping someone will find it and plug it into a computer, this technique is known as?
- Baiting
- Pharming
- Phishing
- Spoofing
This technique is called "baiting." It involves leaving a device (in this case, a malware-infected USB drive) in a location where someone may find it and plug it into a computer out of curiosity. Once connected, the malware can infect the victim's computer.
When an IDS generates an alert for an activity that isn't actually malicious, it's termed as a _______.
- False Negative
- False Positive
- True Negative
- True Positive
When an IDS generates an alert for non-malicious activity, it's called a 'False Positive,' indicating a potential security concern that is, in fact, benign.
The principle that emphasizes using multiple layers of security measures to protect information and systems is called what?
- Defense-in-Depth
- Encryption
- Single Sign-On (SSO)
- Two-Factor Authentication
Defense-in-Depth is a security strategy that advocates implementing multiple layers of security measures. This approach helps to provide redundancy and ensure that even if one layer is breached, other layers can still protect the system. Single Sign-On, Two-Factor Authentication, and Encryption are important security concepts but not the same as Defense-in-Depth.
In the context of firewalls, what does the term "stateful inspection" refer to?
- A method for tracking network packets
- A process for encrypting data transmissions
- A technique for blocking network traffic
- A way to filter website content
"Stateful inspection" in firewalls refers to the method of tracking the state of active connections and making decisions based on the context of the traffic, enhancing security by understanding the state of network connections.
Which tool is commonly used to scan a computer system for known malware signatures?
- Antivirus
- Browser
- Firewall
- VPN
Antivirus software is commonly used to scan a computer system for known malware signatures. It compares files and activities on the computer to a database of known malware signatures to detect and remove malicious software.
DLP solutions often use _______ to detect sensitive data based on predefined criteria.
- Biometrics
- Encryption
- Firewalls
- Machine Learning
Data Loss Prevention (DLP) solutions often employ Machine Learning algorithms to identify and classify sensitive data. These algorithms learn from historical data and predefined criteria to recognize patterns associated with sensitive information, helping prevent data leaks and breaches.
IPsec is a suite of protocols designed to secure what type of communication?
- Internet browsing
- Network
- Wireless connections
IPsec (Internet Protocol Security) is designed to secure network communication, ensuring data integrity and confidentiality. It's often used to create VPNs for secure network connections.
Advanced Persistent Threats (APTs) typically involve long-term attacks that focus on _______ rather than immediate harm.
- DDoS Attacks
- Data Exfiltration
- Exploiting Vulnerabilities
- Phishing Campaigns
APTs aim at "Data Exfiltration," which involves stealing data over an extended period, focusing on long-term gains, not causing immediate harm.
Which term describes the act of intentionally finding and exploiting vulnerabilities in a system, but with the goal of improving its security?
- Cracking
- Cybercrime Prevention
- Hacking
- Penetration Testing
Penetration Testing is the process of intentionally finding and exploiting vulnerabilities in a system with the goal of improving its security. Unlike malicious hacking or cracking, penetration testing is done with the organization's consent to identify and rectify vulnerabilities before potential attackers can exploit them.
During a penetration test, a tester was able to access a company's internal network by mimicking an employee's behavior and tailgating into a secure area. This tester exploited a weakness in what area of security?
- Access Control Systems
- Network Security
- Physical Security
- Social Engineering
The tester exploited a weakness in Social Engineering, as they used tactics to manipulate people into allowing unauthorized physical access.
A common technique used by attackers where they trick users into revealing their passwords by pretending to be legitimate tech support is called _______.
- Phishing
- Ransomware
- Social Engineering
- Spear Phishing
The technique where attackers trick users into revealing their passwords by pretending to be legitimate tech support is known as Social Engineering. It's a psychological manipulation technique to gain confidential information.
Emily, a system administrator, is configuring a new server. She ensures that only necessary services run, disables default accounts, and sets strong password policies. What process is Emily engaged in?
- Patch Management
- Server Clustering
- Server Hardening
- Server Virtualization
Emily is engaged in the process of "Server Hardening." This involves securing a server by minimizing vulnerabilities, such as disabling unnecessary services, strengthening password policies, and removing or disabling default accounts. The goal is to reduce the server's attack surface.