Drill #4

Question 1

data breach:

Answer 1

release of secure information to an un-trusted environment.

Question 2

DoS attack:

Answer 2

Stands for “denial-of-service attack.”

disrupting computer or network by flooding system with unnecessary service requests, which overload the system.

Question 3

security vulnerability:

Answer 3

A weakness on a network, computer which can be exploited by hackers.

A security vulnerability has three elements: a flaw, access to the flaw, and capability to exploit that flaw.

Question 4

exploit

Answer 4

code that takes advantage of a flaw or vulnerability to cause unintended behavior to occur with the software or hardware.

Question 5

zero-day:

Answer 5

The name of a vulnerability unknown to those who would be interested in securing it, which includes the software vendor or user (good guys).

Question 6

zero-day exploit:

Answer 6

Also known as “zero-day attack,” is an exploit that takes advantage of a zero-day vulnerability on its first day of release, before the vendor knows about it.

Question 7

advanced persistent threat:

Answer 7

network attack in which an unauthorized person gains access to a network and stays there undetected for a long period of time.

Stealing data, rather than causing damage to the network or organization.

Question 8

tailgating

Answer 8

A tailgater waits for an authorized user to open and pass through a secure entry and then follows right behind to gain access to a building or other protected areas

Question 9

keylogger

Answer 9

Malware or hardware that observes what someone types on their keyboard, which is then sent back to the bad guys.

Question 10

Bitcoin

Answer 10

A digital currency in which encryption (the process of converting information or data into a code) techniques are used to regulate the generation of units of currency and verify the transfer of funds, operating independently of a central bank.

Question 11

money mule:

Answer 11

A person recruited by a criminal or criminal organization to quickly receive and turnaround funds involved in scams. The person is often unaware of their role in the criminal act.