Chapter 10 vocab

Question 1

Tricking a victim into revealing sensitive information under false pretenses.

Answer 1

Pretexting

Question 2

Exploiting a victim using email messages.

Answer 2

Email Attack

Question 3

Convincing a victim that they are performing a legitimate task within their web browser window when, in fact, they are being tricked into revealing sensitive information or installing malware on their computer.

Answer 3

Browser Attack

Question 4

An attack where the attacker secretly relays and possibly alters the communications between two parties who believe they are directly communicating with each other.

Answer 4

Man-in-the-Middle Attack

Question 5

An attempt to connect to a server by capturing and resending authentication information.

Answer 5

Replay Attack

Question 6

An attack that attempts to overload a system so that the services it provides are no longer available to legitimate network clients.

Answer 6

Denial of Service

Question 7

Software designed to infiltrate or damage a computer system without the owner’s consent or knowledge.

Answer 7

Malware

Question 8

An event in which a hacker tries to gain access to a secure account, such as an email or bank account, in order to steal personal information.

Answer 8

Password Attack

Question 9

A type of authentication that requires the user to provide something that they know, such as a password or PIN.

Answer 9

Type 1 Authentication

Question 10

A type of authentication that requires the user to provide something that they have, such as a key fob, electronic chip, or smart card.

Answer 10

Type 2 Authentication

Question 11

A type of authentication that requires the user to provide something that they are, such as a fingerprint, handprint, retinal pattern, face, or voice.

Answer 11

Type 3 Authentication

Question 12

Authentication that requires two or more evidences of authentication, usually of different types.

Answer 12

Multifactor Authentication

Question 13

A method of authenticating with one system to gain access to other related systems.

Answer 13

Single Sign-on

Question 14

A type of access control where a user has complete control over a resource, and also determines the permissions other users have to those resources.

Answer 14

Discretionary Access Control (DAC)

Question 15

A type of access control that restricts access based on the user’s role in an organization.

Answer 15

Role-based Access Control (RBAC)

Question 16

A type of access control that historically was associated with multilevel security and military systems and may use a security clearance to restrict access to resources. The security manager controls the security policy, and users aren’t able to override the policy.

Answer 16

Mandatory Access Control (MAC)

Question 17

The process of encoding or translating data into another form so that only the intended recipient can decrypt and read the data.

Answer 17

Data Encryption