Week 2

Question 1

What is computer virus?

Answer 1

malicious code written to interfere with computer operations and cause damage to data and software

Question 2

What is malware?

Answer 2

software designed to harm devices or networks

Question 3

What is social engineering?

Answer 3

a manipulation technique that exploits human error to gain private information, access, o valuables

Question 4

What is phishing?

Answer 4

the use of digital communications to trick people into revealing sensitive data or deploying malicious software

Question 5

What are some common types of phishing?

There are 5 types

Answer 5

• Business Email Compromise (BEC)
• Spear Phishing
• Whaling
• Vishing
• Smishing

Question 6

What are the different types of malware?

There are 4 types

Answer 6

• Viruses
• Worms
• Ransomware
• Spyware

Question 7

What are some common types of social engineering?

There are 4 types

Answer 7

• Social Media Phishing
• Watering Hole Attack
• USB Baiting
• Physical Social Engineering

Question 8

What is Business Email Compromise?

Answer 8

A threat actor sends an email message that seems to be from a known source to make a seemingly legitimate request for information, in order to obtain a financial advantage

Question 9

What is spear phishing?

Answer 9

A malicious email attack that targets a specific user or group of users. The email seems to originate from a trusted source

Question 10

What is whaling?

Answer 10

A form of spear phishing. Threat actors target company executives to gain access to sensitive data

Question 11

What is vishing?

Answer 11

The exploitation of electronic voice communication to obtain sensitive information or to impersonate a known source

Question 12

What is smishing?

Answer 12

The use of text messages to trick users, in order to obtain sensitive information or to impersonate a known source

Question 13

What are viruses?

Answer 13

Malicious code written to interfere with computer operations and cause damage to data and software

Question 14

What are worms?

Answer 14

Malware that can duplicate and spread itself across systems on its own

• a worm does not need to be downloaded by a user
• self-replicates and spreads from an already infected computer to other devices on the same network

Question 15

What is ransomware?

Answer 15

A malicious attack where threat actors encrypt an organization’s data and demand payment to restore access

Question 16

What is spyware?

Answer 16

Malware that’s used to gather and sell information without consent. Spyware can be used to access devices. This allows threat actors to collect personal data, such as private emails, texts, voice and image recordings, and locations

Question 17

What is social media phishing?

Answer 17

A threat actor collects detailed information about their target from social media sites. Then, they initiate an attack

Question 18

What is a watering hole attack?

Answer 18

A threat actor attacks a website frequently visited by a specific group of users

Question 19

What is USB baiting?

Answer 19

A threat actor strategically leaves a malware USB stick for an employee to find and install, to unknowingly infect a network

Question 20

What is physical social engineering?

Answer 20

A threat actor impersonates an employee, customer, or vendor to obtain unauthorized access to a physical location

Question 21

What are password attacks?

Answer 21

an attempt to access password secured devices, systems, network, or data

Question 22

what are physical attack?

Answer 22

a security incident that affects not only digital but also physical environments where the incident is deployed

Question 23

What is Adversarial Artificical Intelligence?

Answer 23

a technique that uses AI Technology to conduct attacks more efficiently

Question 24

What are supply-chain attack?

Answer 24

targets systems, applications, hardware, software to locate a vulnerability where malware is deployed

Question 25

What is cryptographic attack?

Answer 25

Affects secure forms of communication between a sender and intended recipient