Midterm

Question 1

A weakness or potential weakness

Answer 1

Vulnerability

Question 2

A person or thing that exploits a vulnerability

Answer 2

Threat

Question 3

Fire, Flooding, hurricane, etc.

Answer 3

Natural threats

Question 4

A.P.T

Answer 4

Advanced Persistent Threat

Question 5

Answer 5

Advanced Persistent Threat (APT)

Question 6

Answer 6

Cyber Kill Chain

Question 7

Avoid unauthorized disclosure of private data

Answer 7

Confidentiality

Question 8

Ensure that data has not been changed from its authentic state

Answer 8

Integrity

Question 9

Ensure that when systems are required, they can be accessed

Answer 9

Availability

Question 10

CIA Triad

Answer 10

Confidentiality
Integrity
Availability

Question 11

likelihood * impact =

Answer 11

Risk

Question 12

A single person should not be judge, jury, and executioner

Answer 12

Separation of duties

Question 13

Only the minimum necessary rights should be assigned

Answer 13

Least privilege

Question 14

A system should reject a request if it cannot fully process it

Answer 14

Fail closed

Question 15

By default, an endpoint is untrusted until fully verified

Answer 15

Zero trust

Question 16

Resources that are self hosted by a company

Answer 16

On premises

Question 17

One compute resource used to host a multitude of resources

Answer 17

Virtualization

Question 18

One resource used to host multiple services from a common template

Answer 18

Containers

Question 19

Part of the Cyber kill chain:

Research, identification, and selection of targets

Answer 19

Reconnaissance

Question 20

Part of the Cyber kill chain:

Pairing remote access malware with exploit into a deliverable payload (e.g. Adobe PDF and Microsoft Office files)

Answer 20

Weaponization

Question 21

Part of the Cyber kill chain:

Transmission of weapon to target (e.g. via email attachments, websites, or USB drives)

Answer 21

Delivery

Question 22

Part of the Cyber kill chain:

Once delivered, the weapon’s code is triggered, exploiting vulnerable applications or systems

Answer 22

Exploitation

Question 23

Part of the Cyber kill chain:

Thea weapon installs a backdoor on a target’s system allowing persistent access

Answer 23

Installation

Question 24

Part of the Cyber kill chain:

Outside server communicates with the weapons providing “hands on the keyboard access” inside the target’s network.

Answer 24

Command & Control

Question 25

Part of the Cyber kill chain:

The attacker works to achieve the objective of the intrusion, which can include exfiltration or destruction of data, or intrusion of another target.

Answer 25

Actions on Objective

Question 26

Heavily funded groups, such as a nation-state, that use advanced methods and resources to lead attacks on a system’s assets to accomplish national security, or economic goals.

Answer 26

Advance Persistent Threat (APT)