Attacks & Their Tools

Question 1

What is an example of “hacktivism”?

Answer 1

A group of environmentalists launch a denial of service against an oil company that is responsible for a large oil spill.

Question 2

Which statement describes cybersecurity?

Answer 2

It is an ongoing effort to protect Internet-connected systems and the data associated with those systems from unauthorized use or harm.

Question 3

What focus describes a characteristic of an indicator of attack (IOA)?

Answer 3

It focuses more on the motivation behind an attack and the means used to compromise vulnerabilities to gain access to assets.

Question 4

What is the motivation of a white hat hacker?

Answer 4

Discovering weakness of networks and systems to improve the security level of these systems.

Question 5

Which risk management plan involves discontinuing an activity that creates a risk?

Answer 5

Risk Avoidance

Question 6

Which type of network threat is intended to prevent authorized users from accessing resources?

Answer 6

DoS Attacks

Question 7

What security tool allows a threat actor to hack into a wireless network and detect security vulnerabilities?

Answer 7

KisMac

Question 8

Which statement describes the term attack surface?

Answer 8

It is the total sum of vulnerabilities in a system that is accessible to an attacker.

Question 9

Which risk management strategy requires careful evaluation of the costs of loss, the mitigation strategy, and the benefits gained from the operation or activity that is at risk?

Answer 9

Risk Reduction

Question 10

What characteristic describes script kiddies?

Answer 10

Inexperienced threat actors running existing scripts, tools, and exploits, to cause harm, but typically not for profit.

Question 11

What characteristic describes a gray hat hacker?

Answer 11

Individuals who commit cyber crimes but not for personal gain or to cause damage.

Question 12

A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use forensic tools?

Answer 12

To detect any evidence of a hack or malware in a computer or network.

Question 13

A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use applications such as Nmap, SuperScan, and Angry IP Scanner?

Answer 13

To probe network devices, servers, and hosts for open TCP or UDP ports.