Cyber Security: Theories and Practice

Any person who wilfully attempts to commit any of the offenses enumerated in this act shall be held liable.

• Attempt in the commission of cybercrime
• Aiding or Abetting in the commission of cybercrime
• Corporate Liability

in fact a Metasearch Engine (it gets its outcomes by utilizing other web indexes).

• Yippy

Unlawful or prohibited acts of libel as defined in Article 355 of the Revised Penal Code, as amended committed through a computer system or any other similar means which may be devised in the future.

• Child Pornography
• Cybersex
• Libel

Another Google search engine, but quite different from its prime engine.

• GOOGLE SCHOLAR

The cybersecurity specialist needs to understand how the law and the organization’s interests help to guide ethical decisions.

• True
• False

Acquisition of domain name over the Internet in bad faith to profit, mislead, destroy reputation, and deprive others from the registering the same.

• Computer-related Forgery
• Cyber-squatting
• Misuse of devices

It is a cargo of transmitted data over a network.

• PAYLOAD

Honesty enables participation of all in pricing and laws.

• True
• False

This is one of the search engines that will help you dig deep and get the results which may be missing on Google and Bing.

• PIPL

Threat actors include, but are not limited to, amateurs, hacktivists, organized crime groups, state-sponsored and terrorist groups.

• True
• False

Published by the ShadowBroker hacker group, WannaCry tried to infect non- patched PCs.

• True
• False

WPA stands for Wi-Fi Protected Access.

• True
• False

The trust that the social engineer is gaining will later be used to unveil confidential pieces of information that could cause severe harm to the business.

• True
• False

Encrypted data can only be read with the secret key or password.

• True
• False

Belonging

• networking, family, peer groups, identity

Many people are apprehensive in the presence of someone they perceive as an authority figure.

• True
• False

Defending against the fallout from state-sponsored cyberespionage and cyberwarfare will continue to be a priority for cybersecurity professionals.

• True
• False

Basicly looks for anything after the : in the site urls.

• INURL

Dignity protects + promotes dignity of every human being.

• True
• False

It is a form of malware which locks a user out of his own system and cuts access to his/her files.

• Ransomware
• Zero Day threat
• Spoofing
• Phishing

Deleting Your Data permanently means destroying the storage device to ensure that the data is unrecoverable.

• True
• False

A hacker who identifies and exploits weaknesses in telephones instead of computer

• Hacktivist
• Phreaker
• Script kiddies

Back up Your Data Prevent the loss of replaceable data.

• True
• False

This record may also include contact information, health and immunization records, and special education records including individualized education programs (IEPs).

• Education Records
• Medical Records
• Employment and Financial Records

A hacker who identifies and exploits weaknesses in telephones instead of computers.

• PHREAKER

Personal Data is any information about you can be considered to be your data. This personal information can uniquely identify you as an individual.

• True
• False

Maintaning Access once a hacker has gained access, they want to keep that access for future exploitation and attacks.

• True
• False

You can find literally everything using _____ , you could even use the inurl dorks whit this.

• Intext

There is an acute shortage of professionals trained to protect vital computer networks and electronic infrastructures from attacks.

A subscription-based search engine. It has a bunch of features apart from contemporary search habits.

• SURFWAX

Poverty

• access to info to overcome poverty

Make sure to protect your devices using limited security layers consisting of specialized security software such as updated antivirus programs and traffic filtering software.

• True
• False

Cybersecurity is really a mindset of understanding the value of assets, perceiving the vulnerabilities, comprehending the potential exploits and attacks, and implementing the proper response to maximize compromise.

• True
• False

It is one of the key weapons for a Social Engineer.

• Phishing
• Trojan horses
• Role playing

Cybersecurity is about understanding how a system works, where its weaknesses are, how someone may attempt to take advantage of those weaknesses, then working to implement protections against any compromise.

• True
• False

It is one of the most predominant methods currently used by hackers that involve tricking the victims to download a malicious file to the system.

• Trojan horses
• Role playing
• Phishing

You can use the _____ to find anything in the title of the website. Which also could be usefull to find downloads or anything else.

• INTITLE

All of us have come across some or the other job that requires us to do many specified set of activities and to linger around looking for better ways of doing that activity.

• True
• False

A Cracker is a person who finds and exploits the weakness in computer systems and/or networks to gain access

• True
• False

Turning off your network devices, it minimizes the chances of becoming a target for hackers.

• Noise reduction
• Security reasons
• Surge protection

Power

• cyber-warfare, -intelligence, espionage

It is a broad topic that covers software vulnerabilities in web and mobile applications and application programming interfaces (APIs).

• Application Security
• Cryptography
• Infrastructure security
• Cloud security

Privacy protects private spheres and rights (big data).

• True
• False

Ethics is the little voice in the background guiding a cybersecurity specialist as to what he should or should not do, regardless of whether it is legal.

• True
• False

Usability it can be defined as the degree to which something is able or fit to be used.

• True
• False

A hacker who gains access to systems with a view to fix the identified weaknesses.

• Grey hat
• White hat
• Black hat

Confidentiality refers to a method of guaranteeing message transmission between parties using digital signature and/or encryption.

• True
• False

Hackers often use this to present different content or URLs to human users and search engines, thereby hiding them under legit looking web material.

• Zero Day threat
• Malware
• Cloaking
• Spoofing

Consumers, businesses and agencies are increasingly getting hacked.

This hacking terminology is highly common among hackers and is a major concern for website owners and developers.

• DDOS

It uses radioelectronic and cryptographic to degrade communication, thus war in the realm of communications.

• Command and Control warfare
• Intelligence-based warfare
• Electronic warfare

CEI was one of the first organizations to recognize the ethical and public policy issues arising from the rapid growth of the information technology field.

• True
• False

Is a technique which tricks users into revealing sensitive information (like usernames, passwords or credit card details) to seemingly benign sources.

• PHISHING

WEP stands for Wired Equivalent Policy.

The reach of cybercrime is growing by the minute, and is now at a point where consumers and regulators are demanding action.

The reach of cybercrime is growing by the hour, and is now at a point where consumers and regulators are demanding action.

• True
• False

14 This record may also include contact information, health and immunization records, and special education records including individualized education programs (IEPs).

• Medical Records
• Education Records
• Employment and Financial Records

The more an organization is independent upon computers and networking, the more that organization needs qualified security experts managing and overseeing every aspect of their infrastructure.

• True
• False

Examples of PII include:

• Social security Number
• Credit card numbers
• Name
• Birth date
• All of the above
• None of the above

Cyber attacks are intentional, malicious acts meant to positively impact another individual or organization.

• True
• False

Justice use cyberspace with Responsibility, Accountability.

• True
• False

Is the function that monitors for and investigates potentially malicious behavior.

• INCIDENT RESPONSE

Equity promotes Internet Governance with equal rights.

• True
• False

It is one of the scariest methods to perform a cyber intrusion mostly because it goes undetected.

• Brute Force Attack
• Phishing
• Spam
• Rootkit

The attacker can use these items to get a huge amount of information about the company organization and network structure.

• Phishing
• Dumpster Diving
• Trojan horses

Medical Records is every time you go to the doctor’s office, more information is added to your electronic health records (EHRs).

• True
• False

Revenge

• targeted damage, e.g. mobbing, bullying

The organization entrusts the cybersecurity specialist with the most sensitive data and resources.

A cybersecurity expert is more than just someone working in the company basement dealing with computers and the myriad of cables that run throughout the building.

• True
• False

Unlike Google, this search engine does not track your activities, which is the first good thing about it.

• DUCKDUCKGO

When you power off your network device, you also lower the possibility of being damaged by electric power surges.

• Surge protection
• Noise reduction
• Security reasons

Unlawful or prohibited acts defined and punishable by Republic Act No. 9775.

• Child Pornography
• Cybersex
• Libel

Published by the ShadowBroker hacker group, WannaCry tried to infect non-patched PCs.

• True
• False

It refers to a threat which is undocumented and hence hidden from any antivirus scanner installed on the system.

• Brute Force Attack
• Zero Day threat
• Botnets
• White hat

Cybersecurity is any aspect of any position in an organization that somehow relates to computer technology and asset protection and how they intersect.

• True
• False

Integrity refers to methods of ensuring that the data is real, accurate and guarded from unauthorized user modification.

• True
• False

It is the function that monitors for and investigates potentially malicious behavior.

• Infrastructure security
• Vulnerability management
• Incident response
• Cloud security

Threat actors are individuals or a group of individuals who perform cyber attacks against another individual or organization.

• True
• False

Is a person who finds and exploits the weakness in computer systems and/or networks to gain access.

• HACKER

Cybersecurity is a term often tossed around as if it means something specific.

• True
• False

Some hackers plant virus-loaded ads on legitimate websites, enabling them to remotely wipe a hard drive clean or cause it to overheat.

Every Social Engineer targets specific behavioral traits in the victim so as to extract maximum information out of him.

• True
• False

WPA2 stands for Wi-Fi Protection Activated 2.

• True
• False

It is sensor based - unlike other IW, which directly corrupt technological systems, intelligence-based warfare is regarded as the "steel to target" IW.

• Intelligence-based warfare
• Command and Control warfare
• Electronic warfare

A hacker who gains unauthorized access to computer systems for personal gain.

• Grey hat
• White hat
• Black hat

Encrypting data in transit and data at rest helps ensure data confidentiality and integrity.

• Application Security
• Cryptography
• Infrastructure security
• Cloud security

Entertainment

• gaming, distraction, adrenalin kick

Nonrepudiation in terms of computer systems means allowing authorized users to access sensitive and protected information.

• True
• False

Damage

• deliberately doing harm, targeted or random

Cyber security is the ongoing effort to protect these networked systems and all of the data from authorized use.

• True
• False

Focuses on building and hosting secure applications in cloud environments and securely consuming third-party cloud applications.

• CLOUD SECURITY

14. Although the modern home networks are much quieter these days, disabling your wireless home network can add calmness to your home.

• Noise reduction
• Surge protection
• Security reasons

This hacking terminology is commonly associated with e-mails.

• Spam
• Brute Force Attack
• Phishing
• Spoofing

The goal of the attackers is financial gain, because they hold the company’s data for ransom until they are paid. This is an example of

• RANSOMED COMPANIES

Consumers, businesses and agencies are decreasingly getting hacked.

• True
• False

A Cracker is a person who finds and exploits the weakness in computer systems and/or networks to gain access.

• True
• False

Hacktivists are hackers who protest against a variety of political and social ideas.

• True
• False

Security is the obligation to protect and the right to forget.

• True
• False

According to Burning Glass Technologies, demand for cybersecurity skills has increased more than ten times faster than for any other IT jobs.

Encryption is the process of converting the information into a form where an unauthorized party cannot read it.

• True
• False

Once all the required sensitive information has been collected, the social engineer may move on to the next target or move towards exploiting the actual system under consideration.

• True
• False

Cybersecurity is a single concept.

• True
• False

Increase your Wi-Fi security by deactivating network encryption.

• True
• False

WPA2 stands for Wi-Fi Protection Activated 2

• True
• False

The term "Social Engineering" can be defined in various ways, relating to both physical and cyber aspects of that activity.

• True
• False

Refers to the use of technology to launch attacks on nations, governments and citizens, causing comparable harm to actual warfare using weaponry.

• CYBER WARFARE

A non-skilled person who gains access to computer systems using already made tools.

• Phreaker
• Hacktivist
• Script kiddies

Professions

• knowledge, increasing job professionalism

You can find literally everything using _____ you could even use the inurl dorks whit this.

• INTEXT

A _____ is a valuable resource for security researchers.

• GOOGLE HACKING

Cybersecurity personnel are needed from large start-ups and businesses that are run out of a home to large corporations as well.

• True
• False

USB sticks are an excellent vehicle for infecting countless PCs and laptops.

• True
• False

New and innovative solutions are needed, raising the appeal of new entrants to the information security market.

The Social Engineer has to make a clear exit in such a way so as to divert any kind of unnecessary suspicion to himself.

• True
• False

When Princess logged onto her bank’s website, the hacker hijacked her session, and gained access to her bank accounts. This is an example of

• HIJACKED PEOPLE

Security it can be defined as referring to all the measures that are taken to protect a system, application or a device as well as ensuring that only people with permission to access them are able to.

• True
• False

A broad topic that covers software vulnerabilities in web and mobile applications and application programming interfaces (APIs).

• Cryptography
• Application Security
• Cloud security

Authenticity or authentication refers to a process that ensures and confirms the user’s identity.

• True
• False

A software robot that runs automated tasks (scripts) over the Internet.

It is a kind of malware attack which infected USB drives into the PLCs and eventually damaged many of these centrifuges.

• STUXNET WORM

New NIST guidelines includes no knowledge-based authentication, such as information from shared secret questions, marketing data, transaction history.

• True
• False

The field of cybercrime is constantly changing, and there’s shortage of cybercriminals working feverishly to crack the latest code.

• True
• False

Freedom enable fair, just, equitable us of cyberspace.

• True
• False

Refers to activities that seek to compromise digital devices, such as computers, smartphones, tablets, and even entire networks.

• HACKING

Addiction

• addicted gaming, dependency

A _____ is a valuable resource for security researchers.

• Google hacking

Hacking refers to activities that seek to compromise digital devices, such as computers, smartphones, tablets, and even entire networks.

• True
• False

This data has created a new area of interest in technology and business.

• Modern Data
• Data
• Traditional Data
• Big Data

A software which acts as a spyware to track a user’s browsing activities covertly.

Information Warfare is described as “a struggle over the information and communications process”

• True
• False

Availability refers to something that is useful or designed for use.

• True
• False

It is the act of creating and using Websites and e-mails designed to look like those of well known legitimate businesses, financial institutions and government agencies to deceive Internet users.

• Role playing
• Phishing
• Trojan horses

He/she breaks into computer systems without authority with a view to identify weaknesses and reveal them to the system owner.

• Black hat
• Grey hat
• a.White hat

Companies do not train their people to be helpful, but they rarely train them to be part of the security process.

• True
• False

Cybersecurity professionals are needed to develop old models.

This engine gives you enormous access to the URL information. It is the front-end of the Internet Archive of open web pages.

• WAYBACK MACHINE

It refers to something that is useful or designed for use.

• UTILITY

The shortage of cybersecurity professionals spans nearly every region and every industry in the nation.

It focuses on building and hosting secure applications in cloud environments and securely consuming third-party cloud applications.

• Infrastructure security
• Cloud security
• Application Security
• Cryptography

These are Local Backup except for

• external hard drive
• Email account
• thumb drives
• CDs/DVDs

The first thing you should do is to change the name of your Wi-Fi network.

• True
• False

The personnel information includes application materials, payroll, offer letters, employee agreements, and any information used in making employment decisions.

• True
• False

Personally identifiable information is any information that can be used to negatively identify an individual.

• True
• False

It involves the use of computer technology to electronically shut down, degrade, corrupt, or destroy an enemy’s information systems.

• Cyber warfare
• Economic Warfare
• Hacker Warfare
• Psychological warfare

_____ in fact a Metasearch Engine (it gets its outcomes by utilizing other web indexes).

• YIPPY

This can be performed at a close range as well as at a long range using binoculars or other vision enhancing devices.

• Shoulder Surfing
• Trojan horses
• Role playing

Cyber Security involves protecting key information and devices from cyber threats.

• True
• False

Means by which hackers deliver a payload to systems and networks are called operating system attack.

• True
• False

Willful engagement, maintenance, control, or operation, directly or indirectly, of any lascivious exhibition of sexual organs or sexual activity, with the aid of a computer system, for favor or consideration.

• Child Pornography
• Libel
• Cybersex

The Computer Ethics Institute is not a resource for identifying, assessing, and responding to ethical issues throughout the information technology industry.

• True
• False

Scanning this step will take the findings from footprinting and begin to drill-down a bit further.

• True
• False

The attacker makes the person more emotionally sure of himself/herself and thus removing the logical awareness of the security breach that is occurring.

• True
• False

Facebook, Google, Twitter, Amazon, eBay, and almost every other significant online site or service did not exist just twenty years ago.

• True
• False

Dominant information security companies and antivirus programs alone are match for growing cyber threats, according to Gartner analysts.

• True
• False

It encompasses the use of information against the human mind (rather than against computer support).

• Cyber warfare
• Psychological warfare
• Economic Warfare
• Hacker Warfare

Although the modern home networks are much quieter these days, disabling your wireless home network can add calmness to your home.

• Surge protection
• Noise reduction
• Security reasons

A hacker who use hacking to send social, religious, and political, etmessages.

• Phreaker
• Hacktivist
• Script kiddies

It includes personnel information, intellectual properties, and financial data.

• Traditional Data
• Modern Data
• Big Data
• Data

A military strategy that applies information warfare on the battlefield in order to separate the command structure of the opponents’ from the units they command.

• Electronic warfare
• Command and Control warfare
• Intelligence-based warfare

Much of the hacking activity that consistently threatens our security is motivated by financial gain.

• True
• False

It is a destructive self-contained program which can self-replicate.

• Malware
• Zero Day threat
• Firewall
• Worm

Reconnaissance is information Gathering and getting to know the target systems is the first process in ethical hacking.

• True
• False

Cybercriminals are getting better at circumventing firewalls and antivirus programs.

• True
• False

Wealth

• profit making, economic competition/war

Utility is referring to the ability to access information or resources in a specified location and in the correct format.

• True
• False

Functionality it can be defined as the purpose that something is designed or expected to fulfill.

• True
• False

A software program designed by hackers to hijack computer systems or steal sensitive information from a device.

• Malware
• Ransomware
• Phishing
• Zero Day threat

The router is best place in which part of the house?

• Bedroom
• Middle of the house
• Kitchen
• Living Room

Inclusiveness reduces the gap between digital winners and digitariat.

• True
• False

Turn off the wireless home network when you’re not at home.

• True
• False

A cybersecurity expert needs to be involved in the actual production installation of software in order to ensure the proper configuration and integration with the existing infrastructure.

• True
• False

Information

• education, formation

Gaining Access is the phase where the immature hacking takes place.

• True
• False

A hacker who use hacking to send social, religious, and political, etc. messages.

• Script kiddies
• Phreaker
• Hacktivist

Handprinting is the technique of accumulating information regarding the target(s) and the surrounding environment.

• True
• False

The term " Social Engineering " can be defined in various ways, relating to both physical and cyber aspects of that activity.

• Socialis

To protect an organization from every possible cyber attack is feasible, for a few reasons.

• True
• False

It is a technique which tricks users into revealing sensitive information (like usernames, passwords or credit card details) to seemingly benign sources.

• Malware
• Spoofing
• Zero Day threat
• Phishing

The effectiveness of an information blockade presumes an era in which the well-being of societies will be as affected by information flows as they are today by flows of material supplies.

• Economic Warfare
• Hacker Warfare
• Cyber warfare
• Psychological warfare

It refers to the use of technology to launch attacks on nations, governments and citizens, causing comparable harm to actual warfare using weaponry.

• Hacker Warfare
• Cyber warfare
• Economic Warfare
• Psychological warfare

These are Local Backup except for;

• thumb drives
• Email account
• CDs/DVDs
• external hard drive

Peace develops “just cyber warfare”, promote just peace.

• True
• False

A network security system, which continuously monitors incoming and outgoing network traffic, and blocks out any untrusted sources to ensure safe communications.

• Firewall
• Zero Day threat
• Malware
• Cloaking

Integrity defends values with courage + resist temptations.

• True
• False

This method is widely used to crack passwords to admin accounts, which in turn can be used to steal information and documents of paramount importance.

• BRUTE FORCE ATTACK

It deals with the protection of internal and extranet networks, labs, data centers, servers, desktops, and mobile devices.

• Infrastructure security
• Application Security
• Cryptography
• Cloud security

Is a software program designed by hackers to hijack computer systems or steal sensitive information from a device.

• MALWARE

A form of malware which can be operated by even an unskilled hacker.

• Phishing
• Malware
• Ransomware
• RAT

A process of encoding a message or information to make it unreadable and secretive.

• ENCRYPTION

Twenty-five percent of organizations describe a shortage of employees with in-demand skills, Symantec reports, and 83 percent of companies say they lack the skills and resources to protect their IT interests.

Make sure you set a strong and unique password to secure your wireless network.

• True
• False