Chapter 3

Question 1

anyone with technical skills, but it often refers to a person who uses his or her abilities to gain unauthorized access to systems or networks in order to commit crimes.

Answer 1

Hacker

Question 2

A type of hackers work doing penetration, hired to attempt to break into the company’s networks to find and report on security vulnerabilities.

Answer 2

White Hat Hacker

Question 3

Also known as ethical hackers

Answer 3

White Hat Hacker

Question 4

This type of hackers are criminals by definition because they violate laws against accessing systems without authorization but they may also engage in other illegal activity, including identity theft and distributed denial-of-service attacks.

Answer 4

Black Hat Hacker

Question 5

Fall somewhere between white hat hackers and black hat hackers.

Answer 5

Gray Hat Hacker

Question 6

an attacker can buy advertising spaces on the websites. Later, when a user clicks on the ad, he might get directed to a page that’s infected with malware.

Answer 6

Bait and switch

Question 7

This way, they can further install malware or adware on your computer. The ads and download links shown in this technique are very attractive and users are expected to end up clicking on the same.

Answer 7

Bait and switch

Question 8

The cookies of a browser keep our personal data such as browsing history, username and passwords for different sites that we access.

Answer 8

Cookie theft

Question 9

also known by a different name, IU Redress

Answer 9

Clickjacking attack

Question 10

this type of hacking, the attacker hijacks the clicks of the victim that aren’t meant for the exact page, but for a page where the hacker wants you to be. It works by fooling an internet user into performing an undesired action by clicking on hidden link.

Answer 10

Clickjacking attacks

Question 11

This are malicious software programs which get installed into the victim’s system and keeps sending the victims data to the hacker.

Answer 11

Virus or Trojans

Question 12

They can also lock your file serve fraud advertisement, divert-traffic, sniff your data, or spread on all the computer connected to your network.

Answer 12

Virus or Trojans

Question 13

a hacking technique using which a hacker replicates the most-accessed sites and traps the victim by sending that spoofed link.

Answer 13

Phishing

Question 14

a hacker just monitors the computer systems and networks to gain some unwanted information.

Answer 14

Eavesdropping

Question 15

hack takes place in public spaces where there is free WiFi.

Answer 15

Fake Wap

Question 16

The goal is to infect a targeted user’s computer and gain access to the network at the target’s workplace.

Answer 16

Waterhole attacks

Question 17

a security exploit in which the attacker seeks to compromise a specific group of end users by infecting websites that members of the group are known to visit.

Answer 17

Waterhole attacks

Question 18

An attack meant to shut down a machine or network, making it inaccessible to its intended users.

Answer 18

Denial of Service

Question 19

A form of malware or hardware that keeps track of and records your keystrokes as you type.

Answer 19

Keylogger

Question 20

Take a close look at want information you store and what you need to store

Answer 20

Avoidance

Question 21

I think this is self-explanatory, prevent the removal of data from the business, etc.

Answer 21

Prevention

Question 22

Take measure like placing limits on the amount that can be withdrawn from a bank account at any time.

Answer 22

Reduction

Question 23

Separate customer data from the internet by only accessing it on a computer that doesn’t have an internet connection or email account.

Answer 23

Separation

Question 24

You actually want to reduce the duplication of customer data. You may want to duplicate firewalls, etc.

Answer 24

Duplication

Question 25

This is the biggest one, transfer the risk of storing credit card data to a third-party processor like PayPal or your bank. Let them take the risk of storing credit cards.

Answer 25

Transfer

Question 26

As a last resort, be aware of the risk you face but if you cannot effectively manage it, you must retain it or avoid it.

Answer 26

Retention

Question 27

The attacker tries to manipulate you into giving them either your information or access to your computer so that they can get the information themselves.

Answer 27

Social engineering

Question 28

malicious software that will damage or harm your computer, network or information with the sole intent of infecting your system, allowing the attacker to do anything they want with it or the information , or benefit from taking control of the device or the information.

Answer 28

Malware

Question 29

Users will be denied access to their information unless they pay a ‘ransom’ to the attacker – usually in an electronic currency such as bitcoin.

Answer 29

Ransomware

Question 30

a type of malware that is delivered by social engineering and blocks access to the information stored on your device/system.

Answer 30

Ransomware