Cyber Attacks

Question 1

Types of Attackers - Amateurs (Script Kiddies)

Answer 1

Explanation: Script kiddies, or amateurs, are inexperienced hackers using existing tools or instructions from the internet to launch attacks. Their motives vary from curiosity to causing harm, and although they use basic tools, their attacks can still have significant consequences.

Question 2

Types of Attackers - Hackers

Answer 2

Explanation: Hackers break into computer systems or networks to gain access. Depending on their intent, they can be classified as white hat (ethical), gray hat (ambiguous), or black hat (malicious) hackers.

Question 3

White Hat Hackers

Answer 3

Explanation: White hat attackers identify system weaknesses with permission, aiming to improve security. They report findings to the system owner and operate with ethical intentions.

Question 4

Gray Hat Hackers

Answer 4

Explanation: Gray hat attackers seek vulnerabilities, reporting findings to system owners only if aligned with their agenda. They may publish details publicly, leaving room for ethical ambiguity.

Question 5

Black Hat Hackers

Answer 5

Explanation: Black hat attackers exploit vulnerabilities for illegal personal, financial, or political gain, engaging in malicious activities without ethical considerations.

Question 6

Organized Hackers

Answer 6

Explanation: Organized hackers comprise cyber criminal organizations, hacktivists, terrorists, and state-sponsored hackers. They are sophisticated, well-organized, and may provide cybercrime services.

Question 7

Hacktivists

Answer 7

Explanation: Hacktivists engage in hacking for political statements, aiming to raise awareness about important issues aligned with their beliefs.

Question 8

State-Sponsored Attackers

Answer 8

Explanation: State-sponsored attackers work on behalf of a government, gathering intelligence or conducting sabotage. They are highly trained, well-funded, and focus on specific government goals

Question 9

Internal Threats - Mishandling Confidential Data

Answer 9

Explanation: Internal threats may involve mishandling confidential data within the organization, potentially compromising sensitive information

Question 10

Internal Threats - USB Media Connections

Answer 10

Explanation: Internal individuals may facilitate outside attacks by connecting infected USB media to the organization’s computer system, introducing potential threats.

Question 11

Internal Threats - Clicking on Malicious Emails or Websites

Answer 11

Explanation: Internal threats can invite malware onto the organization’s network by clicking on malicious emails or websites, posing risks to the network’s integrity.

Question 12

Internal Threats - Threatening Network Infrastructure

Answer 12

Explanation: Internal individuals may pose a threat by jeopardizing the operations of internal servers or network infrastructure devices, potentially disrupting organizational functions.

Question 13

External Threats - Exploiting Network Vulnerabilities

Answer 13

Explanation: External threats involve exploiting vulnerabilities in the network, taking advantage of weaknesses to gain unauthorized access.

Question 14

External Threats - Unauthorized Access to Computing Devices

Answer 14

Explanation: External attackers aim to gain unauthorized access to computing devices, attempting to infiltrate the organization’s systems.

Question 15

External Threats - Social Engineering for Unauthorized Access

Answer 15

Explanation: External threats may use social engineering techniques to gain unauthorized access to organizational data, manipulating individuals for illicit access.