Cyber Threats and Vulnerabilities Flashcards

Which of the following is an example of a phishing attack?

Answer: Sending a fraudulent email that mimics a trusted organization to steal login credentials

Phishing is a type of social engineering attack where attackers attempt to trick individuals into revealing sensitive information, such as usernames and passwords. This is typically done by disguising themselves as a trustworthy entity in electronic communication, like an email from a bank or a well-known company. The goal is to deceive the recipient into clicking a malicious link or providing credentials on a fake website.

Which type of malware is specifically designed to lock users out of their systems until a ransom is paid?

Answer: Ransomware

Ransomware is a malicious software that encrypts a victim's files or locks them out of their computer system. Attackers then demand a ransom, usually in cryptocurrency, in exchange for the decryption key or access restoration. This type of malware is specifically designed to extort money by holding data hostage.

What is a zero-day vulnerability?

Answer: A flaw that attackers exploit before the vendor is aware of it

A zero-day vulnerability refers to a software flaw that is unknown to the vendor or developer, meaning there has been "zero days" for them to create a patch. Attackers discover and exploit these vulnerabilities before any fix is available, making them particularly dangerous. Once discovered, vendors typically work quickly to develop and release a patch.

Which of the following is an example of a Distributed Denial of Service (DDoS) attack?

Answer: Multiple systems overwhelming a target server with excessive traffic

A Distributed Denial of Service (DDoS) attack involves multiple compromised computer systems, often referred to as a botnet, flooding a target server, service, or network with a deluge of internet traffic. This overwhelming volume of requests exhausts the target's resources, making it unavailable to legitimate users. The "distributed" aspect means the attack originates from many different sources, making it harder to block.

Which of the following actions can help protect against social engineering attacks?

Answer: Training employees to recognize suspicious behavior and requests

Social engineering attacks manipulate individuals into performing actions or divulging confidential information, often by exploiting human psychology. Technical safeguards alone are insufficient against these tactics. Therefore, educating employees to identify common social engineering ploys, such as phishing emails or deceptive phone calls, is crucial for building a strong human firewall and preventing successful attacks.