Cybersecurity 4

Question 1

the use of digital communications to trick people into revealing sensitive data or deploying malicious software.

Answer 1

Phishing

Question 2

A threat actor sends an email message that seems to be from a known source to make a seemingly legitimate request for information, in order to obtain a financial advantage.

Answer 2

Business Email Compromise (BEC)

Question 3

A malicious email attack that targets a specific user or group of users. The email seems to originate from a trusted source.

Answer 3

Spear phishing

Question 4

A form of spear phishing. Threat actors target company executives to gain access to sensitive data.

Answer 4

Whaling

Question 5

The exploitation of electronic voice communication to obtain sensitive information or to impersonate a known source.

Answer 5

Vishing

Question 6

The use of text messages to trick users, in order to obtain sensitive information or to impersonate a known source.

Answer 6

Smishing

Question 7

Malware

Answer 7

software designed to harm devices or networks

Question 8

Malicious code written to interfere with computer operations and cause damage to data and software, needs to be initiated by a user (i.e., a threat actor), who transmits it via a malicious attachment or file download.

Answer 8

Virus

Question 9

Malware that can duplicate and spread itself across systems on its own.

Answer 9

Worms

Question 10

A malicious attack where threat actors encrypt an organization’s data and demand payment to restore access.

Answer 10

Ransomware

Question 11

Malware that’s used to gather and sell information without consent. It can be used to access devices. This allows threat actors to collect personal data, such as private emails, texts, voice and image recordings, and locations.

Answer 11

Spyware

Question 12

a manipulation technique that exploits human error to gain private information, access, or valuables. Human error is usually a result of trusting someone without question.

Answer 12

Social Engineering

Question 13

A threat actor collects detailed information about their target from social media sites. Then, they initiate an attack.

Answer 13

Social media phishing

Question 14

A threat actor attacks a website frequently visited by a specific group of users.

Answer 14

Watering hole attack

Question 15

A threat actor strategically leaves a malware USB stick for an employee to find and install, to unknowingly infect a network.

Answer 15

USB baiting

Question 16

A threat actor impersonates an employee, customer, or vendor to obtain unauthorized access to a physical location.

Answer 16

Physical social engineering