Karteikarten
Cyber security
Karten in diesem Stapel (48)
- 1Social engineeringHuman hacking
Tricking Users into revealing their credentials and then using them to gain access to networks or accounts - 2BYOD security riskEmployees devices that are lost the company can suffer a data breach if the device is not encrypted
- 3Definition of distributed denial of service DDoSAttack bombards a network or website with traffic (request for service for example) to crash it and leave it vulnerable to other threats
- 4Definition of a hactivistHacker-activist or someone who does hacking for a cause
hacking regardless of motive is a crime - 5Definition of critical infrastructureSystems and assets whether physical or virtual so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety or any combination of those matter
- 6What are the six of the 18 national critical infrastructure examplesCommercial facilities
Defense industrial base
transportation
national monuments & icons
financial
agricultural - 7Definition of malwareShort for malicious software
Are computer programs whose code causes disrupting,destruction or other devious action - 8What is an example of dump memory grabber that is sold on the black market for $1800 or moreBlack POS
- 9What are the consequences of lax cyber securityDamage reputations, financial penalties, federal and state government fines, lost marketshare, falling share prices and consumer backlash
- 10What is the main cause of data breachHacking
- 11Why is hacking so successfulNegligence
management not doing enough to defend against cyber threats even a high-tech companies and market leaders appeared to be detached from the value of the confidential data they store and the threat that highly motivated hackers will try to steal them - 12What does APT stand forAdvanced persistent threat
Attackers
want to remain unnoticed so they can continue to steal data
Profit motivated cyber criminals often operate in stealth mode - 13What’s the definition of do not carry rulesThese are based on assumptions that devices will inevitably be compromised
- 14Hackers preferred modus operandi is to break into employees mobile devices and (???) into employers network stealing secrets without a traceLeap frog
- 15Why is 2013 dubbed year of the breach2164 Reported data breaches that exposed 823 million records
- 16What are the three greatest cyber security dangers expected over the next few yearsPersistent threats mobile computing and the use of social media for social engineering
- 17What are 2 BYOD security risksBreak into employees mobile devices and leapfrog into employer network stealing secrets without a trace
that mobile devices will inevitably be compromised so implemented do not carry rules - 18What are the three cyber security principlesConfidentiality
integrity
availability - 19Definition of threatSomething or someone that may result in harm to an asset
- 20Definition of an assetSomething that has value that needs to be protected such as customer data trade secrets proprietary formula and other intellectual property
- 21Definition of vulnerabilityA weakness that threatens the confidentiality integrity or availability of an asset
- 22definition of exploitTools or technique that takes advantage of a vulnerability
- 23Definition of bio metricsMethods to identify a person based on a biological feature such as fingerprints or retina
- 24Stronger IT security practices and defenses are obviously needed one of the greatest weakness is users who are ignore the dangers of whatWeek passwords password management is essential to security
- 25What should strong passwords containCombination of upper and lower case letters numbers and punctuation marks and are at least eight -10 characters long
Cannot be a dictionary word
do not reuse passwords on multiple sites
change periodically and in force and both application and network login - 26Definition of spearfishingSpear phisers often target select group of people with something in common
trick users into opening an infected email
email sent that look like the real thing
confidential information extracted through seemingly legitimate website request for passwords, users IDs pins account numbers and so on - 27Definition of botnetsA collection of bots which are malware infected computers
those infected computers are called zombies
zombies can be controlled and organized into network of zombies on the command of a remote bot master also called bot herder - 28IT defensesAntivirus software
Intrusion detection systems IDSs
Intrusion prevention systems IPSs - 29What are two examples of mobile biometricsFingerprint analysis voice patterns
- 30What are some actions that help securing mobile devicesDo not root your device
Do you not use third-party app stores
Install updates regularly
Use strong unlock codes
utilize find my iPhone or android device manager
Be cautious of malicious apps in App Store
enable wipe after 10 incorrect password - 31Definition of intrusion detection systemAn IDS scans for unusual or suspicious traffic pass of defense
- 32Definition of intrusion prevention systemsDesigned to take immediate action such as blocking specific IP addresses whenever a traffic flow anomaly is Detected
active defense - 33In the event of loss or theft of a device a mobile Kill-switch otherwise known as ??? is needed as well as encryptionRemote wipe capability
- 34Crimes can be divided into two categories depending on the tactics used to carry out the crimeViolent and nonviolent
- 35is fraud a violent crimeNo because instead of a gun or a knife fraudsters use deception confidence and trickery
- 36Definition of occupational fraudThe deliberate misuse of assets of one’s employer for personal gain
- 37What is the single most effective fraud prevention tacticMaking employees know that fraud will be detected by IT monitoring systems and punished with possibly turned over to the police or FBI
- 38What is one of the worst and most prevalent crimesIdentity theft
- 39Internal control is a process designed to achieve whatReliability of financial reporting to protect investors
operational efficiencies
compliance with laws regulations and policies
safeguarding of assets - 40Approximately 85% of occupational fraud could have been prevented if proper IT based internal controls have been designed implement it and follow T/FTrue
- 41What are the key areas of a defense strategyPrevention and deterrence
detection
contain the damage
recovery correction
awareness and compliance - 42Definition of physical securityProtection of computer facilities and resources this includes protecting physical properties such as computers data center software manuals and networks it provides protection against most natural hazard as well against some human hazards
- 43Definition of access controlIs the management of who is and is not authorized to use a company’s hardware and software
some examples our firewalls, access control list, restrict access to network, database file our data - 44What two measures are making it clear that if control can be ignored there is no controlSOX and the SEC
- 45What two organizations impose huge fines for data breaches to deter companies from under investing in data protectionSEC
FTC - 46What is the risk assessment formulaExpected loss equals P1 X P2 X L
P1=. Probability of attack
P2 = Probability attack is successful
L= Loss occurring if attack is successful - 47Definition of business impact analysis BIAEstimates the consequences of disruption of a business function and collect data to develop recovery strategies
- 48What are two metrics use to asses threats and decide which ones to prepare forRisk assessment
business impact analysis
Informationen
- Beschreibung
- Karteikarten am Cyber security , erstellt von Roxann Daniello am 10/06/2018.
- Erstellt von
- Roxann Daniello · Jun 2018
- Aktualisiert
- 11 Jun 2018
- Aufrufe
- 0
- Bewertung