IS4560 T&D CHAPTER 1

Question 1

• Something of value that needs to be protected. In the IT realm, this can be data, software, or hardware.

Answer 1

Asset

Question 2

• The process of confirming that someone is who he or she claims to be, as with a username and password.

Answer 2

Authentication

Question 3

• A kind of testing of a computer system in which the testing team must approach it like a “black box,” with no prior knowledge of it.

Answer 3

Black-box testing

Question 4

• Someone who breaks into computer systems without authorization.

Answer 4

Cracker

Question 5

• Attacks in which a service is overwhelmed by traffic preventing or denying its legitimate use.

Answer 5

Denial of service (DoS)

Question 6

• A DoS attack launched simultaneously from large numbers of hosts that have been compromised and act after receiving a particular command.

Answer 6

Distributed denial of service (DDoS)

Question 7

• Gathering material that has been discarded or left in unsecured receptacles, such as trashcans or dumpsters.

Answer 7

Dumpster diving

Question 8

• Someone who knows how hacking works and understands the dangers its poses but uses those skills for good purposes; also known as a “white-hat hacker.”

Answer 8

Ethical hacker

Question 9

• A piece of software, data, or other similar item that can take advantage of a vulnerability or weakness inherent in a system.

Answer 9

Exploit

Question 10

• Originally this term referred to the technology enthusiasts of the 1960s—those who today would be known as “geeks.” Nowadays it’s widely used to refer to pranksters and criminals.

Answer 10

Hacker

Question 11

• A software or hardware device that is designed to detect suspicious or anomalous behavior and report it to the system owner or administrator.

Answer 11

Intrusion detection system (IDS)

Question 12

• A system that intercepts potentially hostile activity prior to it being processed.

Answer 12

Intrusion prevention system (IPS)

Question 13

• A piece of code designed to cause harm, intentionally inserted into a software system to be activated by some predetermined trigger.

Answer 13

Logic bomb

Question 14

• A specific type of malware designed to hide on a system and open up backdoors through which an attacker can gain access, control, or other insight into a system.

Answer 14

Trojan horse

Question 15

• The absence or weakness of a safeguard in an asset.

Answer 15

Vulnerability

Question 16

• A kind of testing in which the testing team is given advance knowledge of the system to be tested; contrasts with “black-box testing.”

Answer 16

White-box testing