Chapter 14

Question 1

Define social engineering.

Answer 1

Psychologically tricking people into divulging information or doing things.

-Blagging
-Phishing

Question 2

Define blagging

Answer 2

Hacker speaks to victim directly and creates a scenario to get the victim to divulge info.
e.g. pretending to be a bank employee

Question 3

Define Phishing

Answer 3

Mass sending hoax emails falsely claiming to by a service. Usually contains a URL link to a fake website to collect personal info

Question 4

Qualities of phishing emails…(5)

Answer 4

-Create urgency
-Poorly written (spelling/grammar)
-Impersonal
-Fake URL Links/sus attachments containing malware
-Suspicious sender email address trying to look genuine

Question 5

Define Malware

Answer 5

Malicious software that..
-Gains unauthorized access to the network
-Gathers information to ransom/sell

Question 6

List 6 types of malware

Answer 6

-Pharming
-Virus
-Worms
-Trojan
-Spyware
-Adware

Question 7

Define Pharming

Answer 7

Malware that changes the DNS cache on a computer so the user thinks they have been taken to a genuine website, but the website is actually fake

Question 7

Define Pharming

Answer 7

Malware that changes the DNS cache on a computer so the user thinks they have been taken to a genuine website, but the website is actually fake

Question 8

How to prevent pharming

Answer 8

Check the http address
Check for secure https connection
check site’s security certificate

Question 9

Define Virus

Answer 9

Programs that hide within another file. They replicate and spread into other files which can be passed on to other computers. Can corrupt data on a disk

Question 10

Define worms

Answer 10

program that replicates and spreads to other computers independently.
Can produce 1000s of copies, taking up a processor and network bandwidth, reducing performance.

Question 11

Define trojan

Answer 11

Malware disguised as a genuine program.
Installed by a user who thinks that it is real.

Question 12

Define spyware

Answer 12

Malware that spies on a computer to send data back to hacker.
Could contain keyloggers.

Question 13

Define adware

Answer 13

Programs that display pop up adverts and redirect search requests to advertising website.
Collects advertising data.

Question 14

How to protect your computer(9)

Answer 14

-Install anti-(malware) software
-Install a firewall
-Ensure OS is up to date
-Ensure anti-(malware) software can scan email attachments
-Use adware removal software
-Avoid opening attachments from unknown sources
-Avoid clicking on email links
-Read t+cs of free software. Don’t click on pop-ups, only close them

Question 15

What is brute force attack?

Answer 15

Trial and error method of obtaining authentication details generated by software

Question 16

What is Distributed denial of service attack?

Answer 16

Spamming login attempts to to bring down an online service. Hackers can recruit other computers using malware aid in the attack.

Question 17

What is Data interception and theft attack?

Answer 17

Intercepting data as it travels across a network by using packet sniffers.

Question 18

What is SQL injection?

Answer 18

Using SQL commands which bypass login requirements and gain access to the database

Question 19

What is penetration testing?

Answer 19

A company using white-hat hackers to form mock attacks to identify security weaknesses and the ability to respond to their attack.

Question 20

What is Black box testing?

Answer 20

Penetration testing done but with no information about the network. This provides a more realistic scenarios and weaknesses

Question 21

What is white box testing?

Answer 21

Penetration test done with knowledge of the network.

Question 22

What are network policies?

Answer 22

Rules to follow if an attack occurs.
e.g. installing and keeping up to data anti malware software.

Question 23

What are heuristics?

Answer 23

Recognizing behaviors of a malware program, rather than just comparing it against a malware list

Question 24

Physical countermeasures to cyberthreats?

Answer 24

-setting user access levels depending on employees responsibilities.
-Long, complicated and regularly changed passwords with numbers + symbols.
-Hiring security guards

Question 25

How does network encryption work?

Answer 25

1) Receiver generates large number with 2 factors assigning a public key and a private key.
2)Receiver broadcasts public key.
3)Sender encrypts message with public key.
4)Only the sender know the private key and can decrypt the message.