DOMAIN 1 Flashcards

Question

PRESTEXTING

Answer 1

An attacker tries to convince a victim to give up information of value, or access to a service or system. The attacker develops a story, or pretext, in order to fool the victim.

Answer 2

A social engineering attack intended to manipulate the thoughts and minds of large groups of people.

Answer 3

Attack using a mixture of conventional and unconventional methods and resources to carry out the campaign. Including: - SOCIAL MEDIA: May use multiple social platforms leveraging multiple/many individuals to amplify the message, influencing credibility. May involve creating multiple fake accounts to post content and seed the spread. And may even include paid advertising.

Answer 4

- Authority - Intimidation - Consensus - Scarcity - Familiarity aka "liking" - Trust - Urgency

Answer 5

attacks attackers use to exploit poorly written software .

Answer 6

freely available on the internet and exploit known vulnerabilities in various operating systems enabling attackers to elevate privilege. Countermeasures: keep security patches up to date anti malware software, EDR/XDR

Answer 7

undocumented command sequences that allow individuals with knowledge of the back door to bypass normal access restrictions. often used in development and debugging. Countermeasures: firewalls, anti malware, network monitoring, code review.

Answer 8

a type of malicious code or program written to alter the way a computer operates and is designed to spread from one computer to another.

Answer 9

Crypto-malware Hoaxes Logic Bombs Trojan Horse

Answer 10

- Worm - Potentially Unwanted Programs (PUPs) - Keylogger - Spyware - Fileless virus - Command and control - Remote access trojan (RAT) - Ransomware

Answer 11

a type of malicious software that does not rely on virus laden files to infect a host. Instead, it exploits applications that are commonly used for legitimate and justified activity to execute malicious code in resident memory.

Answer 12

a computer controlled by an attacker or cybercriminal which is used to send commands to systems compromised by malware and receive stolen data from a target network.

Answer 13

a malware program that gives an intruder administrative control over a target computer.

Answer 14

infects a target machine and then uses encryption technology to encrypt documents, spreadsheets, and other files stored on the system with a key known only to the malware creator. user is then unable to access their files and receives an ominous pop up message warning that the files will be permanently deleted unless a ransom is paid within a short period of time. * Ransomware is a trojan variant.

Answer 15

- Back up your computer - Store backups separately - File auto versioning

Answer 16

- Update and patch computers - Use caution with web links - Use caution with email attachments - Verify email senders - Preventative software programs - User awareness training (Most important defense).

Answer 17

- Dictionary Attacks - Password Spraying - Offline - Online - Plaintext/unencrypted - Brute Force Attack - SALTS Cryptographic

Answer 18

Use programs with built in dictionaries. They attempt all dictionary words to try and find the correct password, in the hope that a user would have used a standard dictionary word.

Answer 19

Attacker tries a password against many different accounts to avoid lockouts that typically come when brute forcing a single account. Succeeds when admin or application sets a default password for new users

Answer 20

Attempt to discover passwords from a captured database or captured packet scan.

Answer 21

Attempts to discover a password from an online system. For example, an attacker trying to log on to an account by trying to guess a user’s password. *Most web and wi-fi attacks are online attacks.

Answer 22

Protocols and authentication methods that leave credentials unencrypted, like basic authentication and telnet.

Answer 23

Attempts to randomly find the correct cryptographic key attempting all possible combinations (trial and error). Password complexity and attacker resources will determine effectiveness of this attack.

Answer 24

Attackers may use rainbow tables , which contain precomputed values of cryptographic hash functions to identify commonly used passwords A salt is random data that is used as an additional input to a one way function that hashes data, a password or passphrase. Adding salts to the passwords before hashing them reduces the effectiveness of rainbow table attacks.

Answer 25

- Something you KNOW (pin or password) - Something you HAVE (trusted device) - Something you ARE (biometric) *Multi-factor Authentication prevents: - Phishing - Spear phishing - Keyloggers - Credential stuffing - Brute force and reverse brute force attacks - Man-in-the-middle (MITM) attacks

Answer 26

Represent significant threats due to the massive number of computers that can launch attacks

Answer 27

a collection of compromised computing devices (often called bots or zombies).

Answer 28

criminal who uses a command and control server to remotely control the zombies often use the botnet to launch attacks on other systems, or to send spam or phishing emails.

Answer 29

- Malicious Flash Drive - Malicious USB cable - Card cloning - Skimming

Answer 30

Attack c omes in two common forms Drives dropped where they are likely to be picked up. Sometime effectively a trojan, shipped with malware installed after leaving the factory.

Answer 31

Less likely to be noticed than a flash drive. May be configured to show up as a human interface device (e.g. keyboard).

Answer 32

Focuses on capturing info from cards used for access, like RFID and magnetic stripe cards.

Answer 33

Involve fake card readers or social engineering and handheld readers to capture (skim) cards, then clone so attacker may use for their own purposes. *Device ( skimmer) often installed at POS devices like ATM and gas pumps.

Answer 34

A rapidly developing field targeting AI and Machine Learning (ML).

Answer 35

Data poisoning that supplies AI and ML algorithms with adversarial data that serves the attackers purposes, or attacks against privacy.

Answer 36

Validate quality and security of the data sources. Secure infrastructure and environment where AI and ML is hosted. Review, test, and document changes to AI and ML algorithms.

Answer 37

Focuses on accomplishing “smart” tasks combining machine learning and deep learning to emulate human intelligence

Answer 38

A subset of AI, computer algorithms that improve automatically through experience and the use of data.

Answer 39

a subfield of machine learning concerned with algorithms inspired by the structure and function of the brain called artificial neural networks.

Answer 40

a cyber-attack that seeks to damage an organization by targeting less-secure elements in the supply chain. Often attempt to compromise devices, systems, or software before it reaches an organization.

Answer 41

Data center is often more secure and less vulnerable to disruptive attacks (like DDoS) On the downside, you will not have facility level or physical system level audit access.

Answer 42

You do not benefit from the cloud’s shared responsibility model. You have more control but are responsible for security of the full stack.

Answer 43

attack on a cryptographic hash to find two inputs that produce the same hash value beat with collision resistant hashes

Answer 44

when a protocol is downgraded from a higher mode or version to a low quality mode or lower version. *Commonly targets TLS.

Answer 45

an attempt to find collisions in hash functions. *Commonly targets digital signatures

Answer 46

an attempt to reuse authentication requests. *Targets authentication ( often Kerberos).

Answer 47

A security hole created when code is executed with higher privileges than those of the user running it.

Answer 48

a type of injection using malicious scripts

Answer 49

A type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. Occur when an attacker uses a web application to send malicious code to a different end user.

Answer 50

similar to cross-site scripting attacks but exploits a different trust relationship. exploits trust a website has for your browser to execute code on the user’s computer.

Answer 51

Is a situation in which the malware tries to inject code into the memory process space of a library using a vulnerable/compromised DLL.

Answer 52

exploits weaknesses in LDAP implementations. This can occur when the user’s input is not properly filtered, and the result can be executed commands, modified content, or results returned to unauthorized queries.

Answer 53

when users enter values that query XML (known as XPath) with values that take advantage of exploits, it is known as an XML injection attack. XPath works in a similar manner to SQL, except that it does not have the same levels of access control, so exploits can return entire documents.

Answer 54

used to compromise web front-end and backend databases.

Answer 55

Use unexpected input to a web application to gain unauthorized access to an underlying database. *NOT new and can be prevented through good code practices.

Answer 56

An attack that consists of finding null references in a target program and dereferencing them, causing an exception to be generated. *Dereferencing means taking away the reference and giving you what it was actually referring to. *GOOD coding is the best protection.

DOMAIN 1 Flashcards

(81 cards)