Comparing Threats, Vulnerabilities, and Common Attacks

Question 1

A targeted attack against a network by an organized group that is sponsored by a nation-state or government

Answer 1

Advanced Persistent Threat - APT

Question 2

Malware that seems legitimate or beneficial but its actually malicious

Answer 2

Trojan

Question 3

Malware that masquerades as a free antivirus program

Answer 3

Rogueware

Question 4

A type of malware that allows attackers to take control of systems from remote locations

Answer 4

Remote Access Trojan - RAT

Question 5

A specific type of trojan that encrypts the user’s data or take control of the computer and lock out the user. Demand for payment in exchange for access follows

Answer 5

Ransomware

Question 6

Ransomware that encrypts the user’s data is sometimes referred to as

Answer 6

Crypto-malware

Question 7

A blackmail technique associated with ransomware that threatens to publish the files along with the victims credentials

Answer 7

Doxing

Question 8

A type of software that tries to separate users from their money using data-harvesting techniques

Answer 8

Privacy-invasive software

Question 9

A message that tells of impending doom from a virus or other security threat that simply doesn’t exist

Answer 9

hoax

Question 10

Attempts to discover which web sites a group of people are likely to visit and then infects those web sites with malware that can infect the visitors

Answer 10

Watering Hole Attack

Question 11

This occurs when a user or process accesses elevated rights and permissions

Answer 11

Privilege Escalation

Question 12

A type of threat detection that occurs from recognizing known patters ork data definition files

Answer 12

Signature based detection

Question 13

A type of threat detection that detects previously unknown threats that do not have signatures to include zero-day exploits

Answer 13

Heuristic based detection

Question 14

A type of threat detection that detect modified system files. Capable of finding rootkit infections.

Answer 14

File Integrity Checkers

Question 15

This is a security feature that prevents code from executing in memory regions marked as non-executable. It’s primary purpose is to protect system from malware

Answer 15

Data Execution Prevention - DEP

Question 16

Proprietary to Cisco and combines multiple technologies to protect a network before an attack, during an attack and after an attack.

Answer 16

AMP - Advanced Malware Protection