Foundation OF CYBERSECURITY

Question 1

Adversarial artificial intelligence (AI)

Answer 1

A technique that manipulates artificial intelligence (AI) and machine learning (ML) technology to conduct attacks more efficiently

Question 2

Business Email Compromise (BEC)

Answer 2

A type of phishing attack where a threat actor impersonates a known source to obtain financial advantage

Question 3

What is CISSP?

Answer 3

Certified Information Systems Security Professional is a globally recognized and highly sought-after information security certification, awarded by the International Information Systems Security Certification Consortium

Question 4

Computer virus

Answer 4

Malicious code written to interfere with computer operations and cause damage to data and software

Question 5

Cryptographic attack

Answer 5

An attack that affects secure forms of communication between a sender and intended recipient

Question 6

Hacker

Answer 6

Any person who uses computers to gain access to computer systems, networks, or data

Question 7

Malware

Answer 7

Software designed to harm devices or networks

Question 8

Password attack

Answer 8

An attempt to access password secured devices, systems, networks, or data

Question 9

Phishing

Answer 9

The use of digital communications to trick people into revealing sensitive data or deploying malicious software

Question 10

Physical attack

Answer 10

A security incident that affects not only digital but also physical environments where the incident is deployed

Question 11

Physical social engineering

Answer 11

An attack in which a threat actor impersonates an employee, customer, or vendor to obtain unauthorized access to a physical location

Question 12

Social engineering

Answer 12

A manipulation technique that exploits human error to gain private information, access, or valuables.

Question 13

Social media phishing

Answer 13

A type of attack where a threat actor collects detailed information about their target on social media sites before initiating the attack.

Question 14

Spear phishing

Answer 14

A malicious email attack targeting a specific user or group of users, appearing to originate from a trusted source.

Question 15

Supply-chain attack

Answer 15

An attack that targets systems, applications, hardware, and/or software to locate a vulnerability where malware can be deployed.

Question 16

USB baiting

Answer 16

An attack in which a threat actor strategically leaves a malware USB stick for an employee to find and install to unknowingly infect a network.

Question 17

Virus

Answer 17

refer to “computer virus”

Question 18

Vishing

Answer 18

The exploitation of electronic voice communication to obtain sensitive information or to impersonate a known source.

Question 19

Watering hole attack

Answer 19

A type of attack when a threat actor compromises a website frequently visited by a specific group of users.

Question 20

Whaling

Answer 20

A form of spear phishing during which threat actors target executives in order to gain access to sensitive data.

Question 21

Worm

Answer 21

Example of Malware: Malware that self-replicates, spreading across the network and infecting computers.

Question 22

Ransomware

Answer 22

A malicious attack during which threat actors encrypt an organization’s data and demand payment to restore access.