Cyber Security: Theories and Practice

The term "Social Engineering" can be defined in various ways, relating to both physical and cyber aspects of that activity.

• True
• False

Facebook, Google, Twitter, Amazon, eBay, and almost every other significant online site or service did not exist just twenty years ago.

• True
• False

Make sure you set a strong and unique password to secure your wireless network.

• True
• False

It focuses on building and hosting secure applications in cloud environments and securely consuming third-party cloud applications.

• Infrastructure security
• Cloud security
• Application Security
• Cryptography

The Computer Ethics Institute is not a resource for identifying, assessing, and responding to ethical issues throughout the information technology industry.

• True
• False

Security is the obligation to protect and the right to forget.

• True
• False

Cybersecurity is any aspect of any position in an organization that somehow relates to computer technology and asset protection and how they intersect.

• True
• False

It encompasses the use of information against the human mind (rather than against computer support).

• Cyber warfare
• Psychological warfare
• Economic Warfare
• Hacker Warfare

Much of the hacking activity that consistently threatens our security is motivated by financial gain.

• True
• False

A cybersecurity expert is more than just someone working in the company basement dealing with computers and the myriad of cables that run throughout the building.

• True
• False

A military strategy that applies information warfare on the battlefield in order to separate the command structure of the opponents’ from the units they command.

• Electronic warfare
• Command and Control warfare
• Intelligence-based warfare

When you power off your network device, you also lower the possibility of being damaged by electric power surges.

• Surge protection
• Noise reduction
• Security reasons

It includes personnel information, intellectual properties, and financial data.

• Traditional Data
• Modern Data
• Big Data
• Data

A hacker who identifies and exploits weaknesses in telephones instead of computer

• Hacktivist
• Phreaker
• Script kiddies

Is a software program designed by hackers to hijack computer systems or steal sensitive information from a device.

• MALWARE

Information Warfare is described as “a struggle over the information and communications process”

• True
• False

A hacker who gains unauthorized access to computer systems for personal gain.

• Grey hat
• White hat
• Black hat

It is one of the key weapons for a Social Engineer.

• Phishing
• Trojan horses
• Role playing

Dominant information security companies and antivirus programs alone are match for growing cyber threats, according to Gartner analysts.

• True
• False

A _____ is a valuable resource for security researchers.

• GOOGLE HACKING

WPA2 stands for Wi-Fi Protection Activated 2

• True
• False

This hacking terminology is commonly associated with e-mails.

• Spam
• Brute Force Attack
• Phishing
• Spoofing

The first thing you should do is to change the name of your Wi-Fi network.

• True
• False

Unlawful or prohibited acts of libel as defined in Article 355 of the Revised Penal Code, as amended committed through a computer system or any other similar means which may be devised in the future.

• Child Pornography
• Cybersex
• Libel

_____ in fact a Metasearch Engine (it gets its outcomes by utilizing other web indexes).

• YIPPY

A hacker who use hacking to send social, religious, and political, etmessages.

• Phreaker
• Hacktivist
• Script kiddies

Addiction

• addicted gaming, dependency

Confidentiality refers to a method of guaranteeing message transmission between parties using digital signature and/or encryption.

• True
• False

Reconnaissance is information Gathering and getting to know the target systems is the first process in ethical hacking.

• True
• False

Scanning this step will take the findings from footprinting and begin to drill-down a bit further.

• True
• False

It is one of the scariest methods to perform a cyber intrusion mostly because it goes undetected.

• Brute Force Attack
• Phishing
• Spam
• Rootkit

A Cracker is a person who finds and exploits the weakness in computer systems and/or networks to gain access.

• True
• False

The shortage of cybersecurity professionals spans nearly every region and every industry in the nation.

Increase your Wi-Fi security by deactivating network encryption.

• True
• False

It is the act of creating and using Websites and e-mails designed to look like those of well known legitimate businesses, financial institutions and government agencies to deceive Internet users.

• Role playing
• Phishing
• Trojan horses

Encrypting data in transit and data at rest helps ensure data confidentiality and integrity.

• Application Security
• Cryptography
• Infrastructure security
• Cloud security

A form of malware which can be operated by even an unskilled hacker.

• Phishing
• Malware
• Ransomware
• RAT

Privacy protects private spheres and rights (big data).

• True
• False

It is the function that monitors for and investigates potentially malicious behavior.

• Infrastructure security
• Vulnerability management
• Incident response
• Cloud security

Utility is referring to the ability to access information or resources in a specified location and in the correct format.

• True
• False

The attacker makes the person more emotionally sure of himself/herself and thus removing the logical awareness of the security breach that is occurring.

• True
• False

Some hackers plant virus-loaded ads on legitimate websites, enabling them to remotely wipe a hard drive clean or cause it to overheat.

This data has created a new area of interest in technology and business.

• Modern Data
• Data
• Traditional Data
• Big Data

All of us have come across some or the other job that requires us to do many specified set of activities and to linger around looking for better ways of doing that activity.

• True
• False

It refers to the use of technology to launch attacks on nations, governments and citizens, causing comparable harm to actual warfare using weaponry.

• Hacker Warfare
• Cyber warfare
• Economic Warfare
• Psychological warfare

Ethics is the little voice in the background guiding a cybersecurity specialist as to what he should or should not do, regardless of whether it is legal.

• True
• False

Equity promotes Internet Governance with equal rights.

• True
• False

Deleting Your Data permanently means destroying the storage device to ensure that the data is unrecoverable.

• True
• False

A cybersecurity expert needs to be involved in the actual production installation of software in order to ensure the proper configuration and integration with the existing infrastructure.

• True
• False

Revenge

• targeted damage, e.g. mobbing, bullying

It is a form of malware which locks a user out of his own system and cuts access to his/her files.

• Ransomware
• Zero Day threat
• Spoofing
• Phishing

Although the modern home networks are much quieter these days, disabling your wireless home network can add calmness to your home.

• Surge protection
• Noise reduction
• Security reasons

Belonging

• networking, family, peer groups, identity

Refers to activities that seek to compromise digital devices, such as computers, smartphones, tablets, and even entire networks.

• HACKING

According to Burning Glass Technologies, demand for cybersecurity skills has increased more than ten times faster than for any other IT jobs.

Functionality it can be defined as the purpose that something is designed or expected to fulfill.

• True
• False

Every Social Engineer targets specific behavioral traits in the victim so as to extract maximum information out of him.

• True
• False

Cybercriminals are getting better at circumventing firewalls and antivirus programs.

• True
• False

It is a cargo of transmitted data over a network.

• PAYLOAD

The reach of cybercrime is growing by the hour, and is now at a point where consumers and regulators are demanding action.

• True
• False

Information

• education, formation

A subscription-based search engine. It has a bunch of features apart from contemporary search habits.

• SURFWAX

Personal Data is any information about you can be considered to be your data. This personal information can uniquely identify you as an individual.

• True
• False

A software robot that runs automated tasks (scripts) over the Internet.

Medical Records is every time you go to the doctor’s office, more information is added to your electronic health records (EHRs).

• True
• False

Is the function that monitors for and investigates potentially malicious behavior.

• INCIDENT RESPONSE

Published by the ShadowBroker hacker group, WannaCry tried to infect non- patched PCs.

• True
• False

Wealth

• profit making, economic competition/war

Availability refers to something that is useful or designed for use.

• True
• False

Consumers, businesses and agencies are decreasingly getting hacked.

• True
• False

Cyber attacks are intentional, malicious acts meant to positively impact another individual or organization.

• True
• False

A hacker who identifies and exploits weaknesses in telephones instead of computers.

• PHREAKER

He/she breaks into computer systems without authority with a view to identify weaknesses and reveal them to the system owner.

• Black hat
• Grey hat
• a.White hat

It deals with the protection of internal and extranet networks, labs, data centers, servers, desktops, and mobile devices.

• Infrastructure security
• Application Security
• Cryptography
• Cloud security

A non-skilled person who gains access to computer systems using already made tools.

• Phreaker
• Hacktivist
• Script kiddies

Hackers often use this to present different content or URLs to human users and search engines, thereby hiding them under legit looking web material.

• Zero Day threat
• Malware
• Cloaking
• Spoofing

The goal of the attackers is financial gain, because they hold the company’s data for ransom until they are paid. This is an example of

• RANSOMED COMPANIES

Honesty enables participation of all in pricing and laws.

• True
• False

These are Local Backup except for;

• thumb drives
• Email account
• CDs/DVDs
• external hard drive

Justice use cyberspace with Responsibility, Accountability.

• True
• False

Many people are apprehensive in the presence of someone they perceive as an authority figure.

• True
• False

in fact a Metasearch Engine (it gets its outcomes by utilizing other web indexes).

• Yippy

Unlike Google, this search engine does not track your activities, which is the first good thing about it.

• DUCKDUCKGO

It is one of the most predominant methods currently used by hackers that involve tricking the victims to download a malicious file to the system.

• Trojan horses
• Role playing
• Phishing

Acquisition of domain name over the Internet in bad faith to profit, mislead, destroy reputation, and deprive others from the registering the same.

• Computer-related Forgery
• Cyber-squatting
• Misuse of devices

It is a technique which tricks users into revealing sensitive information (like usernames, passwords or credit card details) to seemingly benign sources.

• Malware
• Spoofing
• Zero Day threat
• Phishing

Willful engagement, maintenance, control, or operation, directly or indirectly, of any lascivious exhibition of sexual organs or sexual activity, with the aid of a computer system, for favor or consideration.

• Child Pornography
• Libel
• Cybersex

A process of encoding a message or information to make it unreadable and secretive.

• ENCRYPTION

This engine gives you enormous access to the URL information. It is the front-end of the Internet Archive of open web pages.

• WAYBACK MACHINE

When Princess logged onto her bank’s website, the hacker hijacked her session, and gained access to her bank accounts. This is an example of

• HIJACKED PEOPLE

A network security system, which continuously monitors incoming and outgoing network traffic, and blocks out any untrusted sources to ensure safe communications.

• Firewall
• Zero Day threat
• Malware
• Cloaking

Refers to the use of technology to launch attacks on nations, governments and citizens, causing comparable harm to actual warfare using weaponry.

• CYBER WARFARE

Encrypted data can only be read with the secret key or password.

• True
• False

This method is widely used to crack passwords to admin accounts, which in turn can be used to steal information and documents of paramount importance.

• BRUTE FORCE ATTACK

WEP stands for Wired Equivalent Policy.

New and innovative solutions are needed, raising the appeal of new entrants to the information security market.

A software which acts as a spyware to track a user’s browsing activities covertly.

Cyber Security involves protecting key information and devices from cyber threats.

• True
• False

The attacker can use these items to get a huge amount of information about the company organization and network structure.

• Phishing
• Dumpster Diving
• Trojan horses

Damage

• deliberately doing harm, targeted or random

Cybersecurity professionals are needed to develop old models.

This can be performed at a close range as well as at a long range using binoculars or other vision enhancing devices.

• Shoulder Surfing
• Trojan horses
• Role playing

It refers to a threat which is undocumented and hence hidden from any antivirus scanner installed on the system.

• Brute Force Attack
• Zero Day threat
• Botnets
• White hat

The cybersecurity specialist needs to understand how the law and the organization’s interests help to guide ethical decisions.

• True
• False

The field of cybercrime is constantly changing, and there’s shortage of cybercriminals working feverishly to crack the latest code.

• True
• False

The term " Social Engineering " can be defined in various ways, relating to both physical and cyber aspects of that activity.

• Socialis

Usability it can be defined as the degree to which something is able or fit to be used.

• True
• False

New NIST guidelines includes no knowledge-based authentication, such as information from shared secret questions, marketing data, transaction history.

• True
• False

You can find literally everything using _____ you could even use the inurl dorks whit this.

• INTEXT

Another Google search engine, but quite different from its prime engine.

• GOOGLE SCHOLAR

To protect an organization from every possible cyber attack is feasible, for a few reasons.

• True
• False

Focuses on building and hosting secure applications in cloud environments and securely consuming third-party cloud applications.

• CLOUD SECURITY

The personnel information includes application materials, payroll, offer letters, employee agreements, and any information used in making employment decisions.

• True
• False

Threat actors are individuals or a group of individuals who perform cyber attacks against another individual or organization.

• True
• False

Peace develops “just cyber warfare”, promote just peace.

• True
• False

It refers to something that is useful or designed for use.

• UTILITY

Power

• cyber-warfare, -intelligence, espionage

Make sure to protect your devices using limited security layers consisting of specialized security software such as updated antivirus programs and traffic filtering software.

• True
• False

You can use the _____ to find anything in the title of the website. Which also could be usefull to find downloads or anything else.

• INTITLE

Encryption is the process of converting the information into a form where an unauthorized party cannot read it.

• True
• False

14. Although the modern home networks are much quieter these days, disabling your wireless home network can add calmness to your home.

• Noise reduction
• Surge protection
• Security reasons

This hacking terminology is highly common among hackers and is a major concern for website owners and developers.

• DDOS

Entertainment

• gaming, distraction, adrenalin kick

Nonrepudiation in terms of computer systems means allowing authorized users to access sensitive and protected information.

• True
• False

It is a broad topic that covers software vulnerabilities in web and mobile applications and application programming interfaces (APIs).

• Application Security
• Cryptography
• Infrastructure security
• Cloud security

Integrity refers to methods of ensuring that the data is real, accurate and guarded from unauthorized user modification.

• True
• False

Basicly looks for anything after the : in the site urls.

• INURL

The organization entrusts the cybersecurity specialist with the most sensitive data and resources.

Threat actors include, but are not limited to, amateurs, hacktivists, organized crime groups, state-sponsored and terrorist groups.

• True
• False

Cybersecurity is about understanding how a system works, where its weaknesses are, how someone may attempt to take advantage of those weaknesses, then working to implement protections against any compromise.

• True
• False

A broad topic that covers software vulnerabilities in web and mobile applications and application programming interfaces (APIs).

• Cryptography
• Application Security
• Cloud security

Cybersecurity is a term often tossed around as if it means something specific.

• True
• False

Dignity protects + promotes dignity of every human being.

• True
• False

Companies do not train their people to be helpful, but they rarely train them to be part of the security process.

• True
• False

The Social Engineer has to make a clear exit in such a way so as to divert any kind of unnecessary suspicion to himself.

• True
• False

Examples of PII include:

• Social security Number
• Credit card numbers
• Name
• Birth date
• All of the above
• None of the above

Handprinting is the technique of accumulating information regarding the target(s) and the surrounding environment.

• True
• False

It is a destructive self-contained program which can self-replicate.

• Malware
• Zero Day threat
• Firewall
• Worm

It uses radioelectronic and cryptographic to degrade communication, thus war in the realm of communications.

• Command and Control warfare
• Intelligence-based warfare
• Electronic warfare

Poverty

• access to info to overcome poverty

This is one of the search engines that will help you dig deep and get the results which may be missing on Google and Bing.

• PIPL

Published by the ShadowBroker hacker group, WannaCry tried to infect non-patched PCs.

• True
• False

The more an organization is independent upon computers and networking, the more that organization needs qualified security experts managing and overseeing every aspect of their infrastructure.

• True
• False

These are Local Backup except for

• external hard drive
• Email account
• thumb drives
• CDs/DVDs

Turning off your network devices, it minimizes the chances of becoming a target for hackers.

• Noise reduction
• Security reasons
• Surge protection

Once all the required sensitive information has been collected, the social engineer may move on to the next target or move towards exploiting the actual system under consideration.

• True
• False

Integrity defends values with courage + resist temptations.

• True
• False

The router is best place in which part of the house?

• Bedroom
• Middle of the house
• Kitchen
• Living Room

Means by which hackers deliver a payload to systems and networks are called operating system attack.

• True
• False

A software program designed by hackers to hijack computer systems or steal sensitive information from a device.

• Malware
• Ransomware
• Phishing
• Zero Day threat

Cybersecurity personnel are needed from large start-ups and businesses that are run out of a home to large corporations as well.

• True
• False

Is a person who finds and exploits the weakness in computer systems and/or networks to gain access.

• HACKER

Cybersecurity is really a mindset of understanding the value of assets, perceiving the vulnerabilities, comprehending the potential exploits and attacks, and implementing the proper response to maximize compromise.

• True
• False

There is an acute shortage of professionals trained to protect vital computer networks and electronic infrastructures from attacks.

Turn off the wireless home network when you’re not at home.

• True
• False

Back up Your Data Prevent the loss of replaceable data.

• True
• False

The trust that the social engineer is gaining will later be used to unveil confidential pieces of information that could cause severe harm to the business.

• True
• False

Any person who wilfully attempts to commit any of the offenses enumerated in this act shall be held liable.

• Attempt in the commission of cybercrime
• Aiding or Abetting in the commission of cybercrime
• Corporate Liability

You can find literally everything using _____ , you could even use the inurl dorks whit this.

• Intext

A Cracker is a person who finds and exploits the weakness in computer systems and/or networks to gain access

• True
• False

Unlawful or prohibited acts defined and punishable by Republic Act No. 9775.

• Child Pornography
• Cybersex
• Libel

A _____ is a valuable resource for security researchers.

• Google hacking

It is sensor based - unlike other IW, which directly corrupt technological systems, intelligence-based warfare is regarded as the "steel to target" IW.

• Intelligence-based warfare
• Command and Control warfare
• Electronic warfare

A hacker who use hacking to send social, religious, and political, etc. messages.

• Script kiddies
• Phreaker
• Hacktivist

It is a kind of malware attack which infected USB drives into the PLCs and eventually damaged many of these centrifuges.

• STUXNET WORM

Freedom enable fair, just, equitable us of cyberspace.

• True
• False

WPA2 stands for Wi-Fi Protection Activated 2.

• True
• False

Twenty-five percent of organizations describe a shortage of employees with in-demand skills, Symantec reports, and 83 percent of companies say they lack the skills and resources to protect their IT interests.

Defending against the fallout from state-sponsored cyberespionage and cyberwarfare will continue to be a priority for cybersecurity professionals.

• True
• False

Security it can be defined as referring to all the measures that are taken to protect a system, application or a device as well as ensuring that only people with permission to access them are able to.

• True
• False

Is a technique which tricks users into revealing sensitive information (like usernames, passwords or credit card details) to seemingly benign sources.

• PHISHING

Hacking refers to activities that seek to compromise digital devices, such as computers, smartphones, tablets, and even entire networks.

• True
• False

The reach of cybercrime is growing by the minute, and is now at a point where consumers and regulators are demanding action.

CEI was one of the first organizations to recognize the ethical and public policy issues arising from the rapid growth of the information technology field.

• True
• False

Authenticity or authentication refers to a process that ensures and confirms the user’s identity.

• True
• False

Maintaning Access once a hacker has gained access, they want to keep that access for future exploitation and attacks.

• True
• False

It involves the use of computer technology to electronically shut down, degrade, corrupt, or destroy an enemy’s information systems.

• Cyber warfare
• Economic Warfare
• Hacker Warfare
• Psychological warfare

The effectiveness of an information blockade presumes an era in which the well-being of societies will be as affected by information flows as they are today by flows of material supplies.

• Economic Warfare
• Hacker Warfare
• Cyber warfare
• Psychological warfare

This record may also include contact information, health and immunization records, and special education records including individualized education programs (IEPs).

• Education Records
• Medical Records
• Employment and Financial Records

A hacker who gains access to systems with a view to fix the identified weaknesses.

• Grey hat
• White hat
• Black hat

Professions

• knowledge, increasing job professionalism

14 This record may also include contact information, health and immunization records, and special education records including individualized education programs (IEPs).

• Medical Records
• Education Records
• Employment and Financial Records

Gaining Access is the phase where the immature hacking takes place.

• True
• False

USB sticks are an excellent vehicle for infecting countless PCs and laptops.

• True
• False

Personally identifiable information is any information that can be used to negatively identify an individual.

• True
• False

Consumers, businesses and agencies are increasingly getting hacked.

Cybersecurity is a single concept.

• True
• False

Inclusiveness reduces the gap between digital winners and digitariat.

• True
• False

Hacktivists are hackers who protest against a variety of political and social ideas.

• True
• False

WPA stands for Wi-Fi Protected Access.

• True
• False

Cyber security is the ongoing effort to protect these networked systems and all of the data from authorized use.

• True
• False