0. Introduction

Question 1

Confidentiality

Answer 1

Keeping systems and data from being accessed, seen, and read to anyone who is not authorized to do so.

Question 2

Integrity

Answer 2

Protect the data from modification or deletion by unauthorized parties, and ensuring that when authorized people make changes that shouldnt have been made the damage can be undone

Question 3

Availability

Answer 3

Systems, access channels, and authentication mechanisms must all be working properly for the information they provide and protect to be available when needed.

Question 4

Non-Repudiation

Answer 4

The assurance that someone cannot deny the validity of something. legal concept that is widely used in information security and refers to a service, which provides proof of the origin of data and the integrity of the data.

Question 5

Black Hat hacker

Answer 5

Hackers that seek to perform malicious activities

Question 6

Grey Hat hacker

Answer 6

Hackers that perform good or bad activities but do not have the permission of the organization they are hacking against

Question 7

White Hat Hacker

Answer 7

Ethical hackers; they use their skills to improve security by exposing vulnerabilities before malicious hackers

Question 8

Script Kiddie/Skiddies

Answer 8

Unskilled individual who uses malicious scripts or programs, such as a web shell, developed by others to attack computer systems and networks and deface websites

Question 9

State-Sponsored Hacker

Answer 9

hacker that is hired by a government or entity related

Question 10

Hacktivist

Answer 10

Someone who hacks for a cause; political reasons

Question 11

Suicide hackers

Answer 11

These hackers are not afraid of going to jail or facing any sort of punishment, they hack to get the job done.

Question 12

Cyberterrorist

Answer 12

Motivated by religious or political reasons to create fear or disruption

Question 13

Hack Value

Answer 13

Perceived value or worth of a target as seen by the attacker

Question 14

Vulnerability

Answer 14

A system flaw, weakness on the system

Question 15

Threat

Answer 15

Exploits a vulnerability

Question 16

Exploit

Answer 16

These are a way of gaining access to a system through a security flaw and taking advantage of the flaw for their benefit

Question 17

Payload

Answer 17

Component of an attack; it is the part of the private user text which could also contain malware such as worms or viruses which perform the malicious action.

Question 18

Zero-Day Attack

Answer 18

Attack that occurs before a vendor knows or is able to patch a flaw

Question 19

Daisy Chaining / Pivotting

Answer 19

It involves gaining access to a network and/or computer and then using the same information to gain access to multiple networks and computers that contains desirable information

Question 20

Enterprise Information Security Architecture (EISA)

Answer 20

Determines the structure and behavior of organizations information systems through processes, requirements, principles and models.