Module 1 Lecture 6

Question 1

What can be hacked:

Answer 1

Anything with an IP address, anything connected to the internet has an IP address.

Question 2

Common types of cyber attacks:

Answer 2

Malware, phishing, man-in-the-middle attack, denial-of-service attack, SQL injection.

Question 3

Malware (malicious software):

Answer 3

Virus, worms, trojan, adware, spyware, ransomware.

Question 4

Virus:

Answer 4

Specific type of malware, contagious piece of code that infects other software on a host system then spreads itself when its run, mostly known to spread when software is shared between computers. Embedded in a host program, a separate executable application that has been embedded with the virus, virus is activated when the app is run.

Question 5

Worm:

Answer 5

Standalone app. Unlike a virus, it does not need a host application, can easily replicate to other computers, typically more severe than a virus both in how it spreads but also in its impact on files and applications.

Question 6

Trojan:

Answer 6

A type of malicious code or software that looks legitimate but can take control of your computer. Designed to damage, disrupt, steal or in general inflict some other harmful action on data or network. Often comes in email from someone you know.

Question 7

Adware:

Answer 7

Known as advertisement-supported software. Creators of adware include advertisements or help distribute other software to earn money. Ads may be within software itself, adware may encourage you to install additional software provided by third-party sponsors.

Question 8

Spyware:

Answer 8

Unwanted software that infiltrates your computing device, stealing your internet usage data and sensitive information.

Question 9

Ransomware:

Answer 9

Type of malicious software designed to block access to a computer system until a sum of money is paid.

Question 10

Attacks come through either:

Answer 10

People, data, or systems.

Question 11

First line of defense; people:

Answer 11

Organizations must enable employees, customers, and partners to access information electronically, biggest issue of information security is people not tech.

Question 12

Authentication and authorization:

Answer 12

Authentication is a method for confirming users identities, authorization is the process of giving someone permission to do or have something.

Question 13

Common methods of authentication:

Answer 13

Something the user knows, something the user has, something that is part of the user.

Question 14

Something the user knows:

Answer 14

User ID, password, most common way to identify individual users, most ineffective form of authentication.

Question 15

Something the user has:

Answer 15

Smartphone, USB security key, hardware token.

Question 16

Something that is part of the user:

Answer 16

The best and most effective way to manage authentication, uses biometric identification like fingerprint or face to authenticate.

Question 17

Privilege escalation:

Answer 17

A network intrusion attack that takes advantage of programming errors or design flaws to grant the attacker elevated access to the network and its associated data and applications.

Question 18

Data prevention and resistance:

Answer 18

One of the most common defenses for preventing a security breach is a firewall, which is hardware or software that guards a private network by analyzing the information leaving and entering the network.

Question 19

Anti-spam protection:

Answer 19

Keeps malicious spam out of your mailbox, reduces chance of employee clicking on potentially harmful links, keeps inbox form clutter, false positives, false negatives.

Question 20

Anti-virus protection:

Answer 20

Protects malware from getting on your system, detects malware on your computer, stops malware from doing damage, constantly updating.

Question 21

Backup strategies:

Answer 21

Local backup, offsite backup, cloud backup, good for fighting cyberattacks.