Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Security+ > Threats, Attacks, and Vulnerabilities > Flashcards

Threats, Attacks, and Vulnerabilities Flashcards

1
Q

Address Resolution Protocol (ARP)

A

Protocol used to map known IP addresses to unknown physical addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

ARP

A

Address Resolution Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Address Resolution Protocol (ARP) poisoning

A

An attack that convinces the network the attacker’s MAC address is the one associated with an allowed address, so the traffic is wrongly sent to the attacker’s address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

MAC (address)

A

Media Access Control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

adware

A

Software that gathers information to pass on to marketers or that intercepts personal data and makes it available to third parties

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

antivirus software

A

Software that identifies the presence of a virus and is capable of removing or quarantining the virus

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

armored virus

A

A virus that is protected in a way that makes disassembling it difficult

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

ARP spoofing

A

similar to ARP poisoning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

attack

A

Any unauthorized intrusion into the normal operations of a computer or network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

attack surface

A

The area of an application that is available to users – those who are authenticated and those who are not

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

attack surface reduction (ASR)

A

Minimizing the possibility of exploitation by reducing the amount of code and limiting potential damage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

ASR

A

attack surface reduction

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

backdoor

A

An opening left in a program application that allows additional access to data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

bot

A

An automated software program that collects information on the web

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

buffer overflow

A

A type of denial of service (DoS) attack that occurs when more data is put into a bugger than it can hold

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

clickjacking

A

Using multiple transparent or opaque layers to trick a user into clicking a button on another page, when they had intended to click on the top page

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

companion virus

A

A virus that creates a new program that runs in place of an expected program of the same name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

cross-site request forgery (XSRF)

A

A form of web-based attack in which unauthorized commands are sent from a user that a website trusts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

XSRF

A

cross-site request forgery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

cross-site scripting (XSS)

A

Running a script routine on a user’s machine from a website without their permission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

XSS

A

cross-site scripting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

denial-of-service (DoS)

A

A type of attack that prevents any users from using a system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

DoS

A

denial-of-service (attack)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

dictionary attack

A

The act of attempting to crack passwords by testing them against a list of dictionary words

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
distributed denial-of-service (DDoS)
A derivative of a DoS attack in which multiple hosts in multiple locations all focus on one target to reduce its availability to the public
26
DDoS
distributed denial-of-service
27
DNS poisoning
An attack method in which a daemon caches DNS reply packets, which sometimes contain other information
28
DNS spoofing
The DNS server is given information about a name server that it thinks is legitimate when it isn't
29
Domain Name System (DNS)
The network service used in TCP/IP networks that translates hostnames to IP addresses
30
DNS
Domain Name System
31
integer overflow
Putting too much information into too small of a space that has been set aside for numbers
32
IP spoofing
Making the data look as if it came from a trusted host when it didn't
33
Principle of least privilege
A permission method in which users are granted only the privileges necessary to perform their job function
34
logic bomb
Any code that is hidden and causes something unexpected to happen based on some criteria being met
35
macro virus
A software exploitation virus that works by using the macro feature included in many applications
36
malicious code
Any code that is meant to do harm
37
Malicious insider threat
A threat from someone inside the organization intent on doing harm
38
man-in-the-middle
An attack that occurs when someone/something that is trusted intercepts packets and retransmits them to another party
39
multipartite virus
A virus that attacks a system in more than one way
40
password attacks
Attempting to ascertain a password that you should not know
41
phage virus
A virus that modifies and alters other programs and databases
42
ping of death
A large Internet Control Message Protocol (ICMP) packet sent to overflow the remote host's buffer
43
polymorphic
An attribute of some viruses that allows them to mutate and appear differently each time they crop up
44
privilege escalation
The result when a user obtains access to a resource that they wouldn't normally be able to access
45
ransomware
Software that demands payment before restoring the data or system infected
46
replay attack
An attack that captures portions of a session to play back later to convince a host that it is still talking to the original connection
47
retrovirus
A virus that attacks or bypasses the antivirus software installed on a computer
48
rogueware
A form of malware that tries to convince the user to pay for a fake threat
49
rootkit
Software program that has the ability to obtain root-level access and hide certain things from the operating system
50
scareware
Software that tries to convince unsuspecting users that a threat exists
51
shim
A small library that is created to intercept API calls transparently
52
spoofing
An attempt by someone or something to masquerade as someone/something else
53
spyware
Malware working on behalf of a third party to exfiltrate data
54
stealth virus
A virus that attempts to avoid detection by masking itself from applications
55
Trojan horse
Any application that masquerades as one thing in order to get past scrutiny and then does something malicious
56
typo squatting
Creating domains that are based on the misspelling of another
57
URL hijacking
Registering domains that are similar to those for a known entity but based on misspelling or typo error i.e. whitehouse.com
58
virus
A program intended to damage a computer system
59
watering hole attack
Identifying a site that is visited by those whom they are targeting, poisoning that site, then waiting for the results
60
Xmas attack
An advanced attack that tries to get around detection and send a packet with every single option enabled
61
zero-day exploit
An attack that begins the very day an exploit is discovered
62
zombie
Any system taking directions from a master control computer; a bot in a botnet

Security+ (12 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions