Chapter 2 Key Terms

Question 1

spreading rapidly to other systems to impact a large number of users
  payload 
  RAT 
  circulation 
  trojan

Answer 1

circulation

Question 2

the nefarious actions the malware performs
  flatulence 
  concealment 
  payload capabilitie 
  payload

Answer 2

payload capabilities

Question 3

a false warning, often contained in an email message claiming to come from the IT department
  hoax 
  phishing 
  whaling 
  impersonation

Answer 3

Hoax

Question 4

to watch an individual entering the security code on a keypad; a user casually observes someone entering secret information, such as the security code on a door keypad
  shoulder surfing 
  spear phishing 
  tailgating 
  watering hole attack

Answer 4

shoulder surfing

Question 5

delivers advertising content in a manner that is unexpected and unwanted by the user
  backdoor 
  impersonation 
  adware 
  spyware

Answer 5

adware

Question 6

avoiding detection by hiding its presence from software scanners that are looking for malware
  concealment 
  virus 
  rootkit 
  worm

Answer 6

concealment

Question 7

digging through trash receptacles to find information that can be useful in an attack
  watering hole attack 
  tailgating 
  dumpster diving 
  shoulder surfing

Answer 7

dumpster diving

Question 8

a malicious program that uses a computer network to replicate
  trojan 
  concealment 
  virus 
  worm

Answer 8

worm

Question 9

used to delete data; a computer code that is typicaly added to a legitimate program but lies dormant until a specific logical event triggers it
  logic bomb 
  backdoor 
  time bomb 
  whaling

Answer 9

logic bomb

Question 10

an executable program that masquerades as performing a benign activity but also does something malicious
  worm 
  trojan 
  RAT 
  virus

Answer 10

trojan

Question 11

once an authorized person opens the door, one or more individuals can follow behind and also enter
  dumpster diving 
  mantrap 
  shoulder surfing 
  tailgating

Answer 11

tailgating

Question 12

gives access to a computer, program, or service that circumvents any normal security protections
  social engineering 
  rootkit 
  spyware 
  backdoor

Answer 12

backdoor

Question 13

gives the threat actor unauthorized remote access to the victim's computer by using specially configured communication protocols
  trojan 
  worm 
  RAT 
  virus

Answer 13

RAT

Question 14

a means of gathering information for an attack by relying on the weaknesses of individuals
  phishing 
  whaling 
  gregarious 
  social engineering

Answer 14

social engineering

Question 15

sending millions of generic emails; targetting specific users
  vishing 
  whaling 
  phishing 
  spear phishing

Answer 15

spear phishing

Question 16

to masquerade as a real or fictitious character and then play out the role of that person on a victim
  impersonation 
  hoax 
  identity theft 
  phishing

Answer 16

impersonation

Question 17

blocking the user from accessing the computer; encrypting all files on the computer
  crypto-malware 
  rootkit 
  keylogger 
  ransomware

Answer 17

cypto-malware

Question 18

directed toward a smaller group of specific individuals, such as the major executives working for a manufacturing company
  dumpster diving 
  whaling 
  social engineering 
  watering hole attack

Answer 18

watering hole attack

Question 19

a type of malicious software that, when executed, replicates itself by modifying other computer programs and inserting its own code
  logic bomb 
  concealment 
  worm 
  virus

Answer 19

virus

Question 20

silently captures and stores each keystroke that a user types on the computer’s keyboard

keylogger
phishing
whaling
spyware

Answer 20

keylogger

Question 21

prevents a user's device from properly and fully fuctioning until a fee is paid
  spyware 
  crypto-malware 
  ransomware 
  rootkit

Answer 21

ransomware

Question 22

tracking software that is deployed without the consent or control of the user
  spyware 
  adware 
  backdoor 
  social engineering

Answer 22

spyware

Question 23

targets the "big fish," namely, wealthy individuals or senior executives within a business who typically would have larger sums of money in a bank account that an attacker could access if the attack is successful
  phishing 
  spear phishing 
  impersonation 
  whaling

Answer 23

whaling

Question 24

once the malware reaches a system, it must embed itself into that system.
  infection 
  rootkit 
  virus 
  concealment

Answer 24

infection

Question 25

an attacker calls a victim who, upon answering, hears a recorded message that pretends to be from the user's bank stating that her credit card has experienced fraudulent activity or that her bank account has had unusual activity
  vishing 
  hoax 
  whaling 
  phishing

Answer 25

vishing

Question 26

Which of the following describes the key difference between vishing and phishing attacks?
A.Phishing is used by attackers to steal a person’s identity.
B.Vishing attacks require some knowledge of the target of attack.
C.Vishing attacks are accomplished using telephony services.
D.Phishing is a category of social engineering attack.

Answer 26

C.Vishing attacks are accomplished using telephony services.

Question 27

Which of the following works by implanting software on systems but delays execution until a specific set of conditions is met?
A.Logic bomb
B.Trojan
C.Scareware
D.Ransomware

Answer 27

A. Logic bomb

Question 28

A third-party penetration testing company was able to successfully use an ARP cache poison technique to gain root access on a server. The tester successfully moved to another server that was not in the original network. Which of the following is the MOST likely method used to gain access to the other host?
A.Backdoor
B.Pivoting
C.Persistence
D.Logic Bomb

Answer 28

A. Backdoor

Question 29

A systems administrator found a suspicious file in the root of the file system. The file contains URLs, usernames, passwords, and text from other documents being edited on the system. Which of the following types of malware would generate such a file?A.Keylogger
B.Rootkit
C.Bot
D.RAT

Answer 29

Keylogger

Question 30

An attacker wearing a building maintenance uniform approached a company’s receptionist asking for access to a secure area. The receptionist asks for identification, a building access badge and checks the company’s list approved maintenance personnel prior to granting physical access to the secure are. The controls used by the receptionist are in place to prevent which of the followingtypes of attacks?A.Tailgating
B.Shoulder surfing
C.Impersonation
D.Hoax

Answer 30

C. Impersonation