Quiz I.T. Week 4

29問 • 2年前

問題一覧

are related terms for individuals who have the skills to gain access to computer systems through unauthorized or unapproved means.

Hackers and Attackers

neutral term for a user who excelled at computer programming and computer system administration.

Hacker

always represents a malicious system intruder.

Attacker

acker who discovers and exposes security flaws in applications and operating systems so that manufacturers can fix them before they become widespread problems. It is sometimes called an ethical hack.

White Hat

discovers and exposes security vulnerabilities for financial gain or for some malicious purpose.

Black Hat

any unwanted software that has the potential to damage a system, impede performance, or create a nuisance condition.

Malware

piece of code that spreads from one computer to another by attaching itself to other files.

Virus

piece of code that spreads from one computer to another on its own, not by attaching itself to another file.

Worm

insidious type of malware that is itself a software attack and can pave the way for a number of other types of attacks.

Trojan Horse

piece of code that sits dormant on a target computer until it is triggered by a specific event, such as a specific date.

Logic Bomb

Surreptitiously installed malicious software that is intended to track and report the usage of a target system, or to collect other data the author wishes to obtain. Data collected can include web browsing history; personal information; banking and other financial information; as well as usernames and passwords.

Spyware

Software that automatically displays or downloads advertisements when it is used.

Adware

Code that is intended to take full or partial control of a system at the lowest levels.

Rootkit

email-based threat that presents various advertising materials, promotional content, or get- rich-quick schemes to users.

SPAM

malicious software that prevents you from using your computer. It usually displays a message stating that you must pay a fee or face some other penalty before you can access your files and computer again.

Ransomware

human-based attack where the goal is to look over the shoulder of an individual as he or she enters password information or a PIN.

Shoulder Surfing

human-based or software-based attack where the goal is to pretend to be someone else for the purpose of identity concealment.

Spoofing

human-based attack where an attacker pretends to be someone he is not.

Impersonation

This is an email-based or web-based attack that is intended to trick the user into performing undesired actions, such as deleting important system files in an attempt to remove a virus.

Hoax

Thisisacommontypeofemail-basedsocialengineeringattack. theattackersends an email that seems to come from a respected bank or other financial institution.

Phishing

This is a human-based attack where the goal is to extract personal, financial, or confidential information from the victim by using services such as the telephone system and IP-based voice messaging services (Voice over Internet Protocol [VoIP]) as the communication medium. Voice Phishing

Vishing

form of phishing that targets individuals who are known to possess a good deal of wealth. It is also known as spear phishing.

Whaling

an Internet messaging (IM)-based attack similar to spam that is propagated through IM instead of through email.

SPIM

Any type of attack in which the attacker attempts to obtain and make use of passwords illegitimately.

Password Cracking

simplest type of password attack and involves an individual making repeated attempts to guess a password by entering different common password values, such as the user’s name, a spouse’s name, or a significant date.

Guessing

Passwords can be stolen by various means, including sniffing network communications, reading handwritten password notes, or observing a user in the act of entering the password.

Stealing

automates password guessing by comparing encrypted passwords against a predetermined list of possible password values.

Dictionary Attack

attacker uses password-cracking software to attempt every possible alphanumeric password combination.

Brute Force Attack

utilizes multiple attack vectors including dictionary, brute-force, and other attack methodologies when trying to crack a password.

Hybrid Password Attack

Quiz I.T Week 3

nicollette claire · 34問 · 2年前

Quiz I.T Week 3