2.1 Understanding Attacks

Which of the following is considered a type of targeted attack?

• Phishing

• Opportunistic attack

• Insider

• Nation state

Which term refers to individuals or groups that commit cybercrimes?

• Competitor

• IT Specialist

• Cybercriminal

• Network Administrator

What term is used to describe a country that launches cyberattacks against another country?

• Hacker

• Cyberactivist

• Nation state

• Cyberterrorist

Which term refers to the type of threat that originates from within an organization?

• External threat

• Open-source intelligence (OSINT)

• Internal threat

• Persistent threat

What is the term for information gathered from publicly available sources to be used in an intelligence context?

• Gray hat

• Black hat

• White hat

• Open-source intelligence (OSINT)

Which term describes a hacker who violates computer security for little reason beyond maliciousness or for personal gain?

• White hat

• Black hat

• Gray hat

• External threat

Which type of hacker is known for ethical hacking, often employed to help improve systems security?

• Black hat

• Gray hat

• White hat

• Persistent threat

What type of hacker falls between ethical and malicious activities, sometimes violating laws or typical ethical standards, but without the malicious intent ascribed to black hat hackers?

• White hat

• Black hat

• Persistent threat

• Gray hat

What is a targeted attack?

• An attack that is carried out without any specific target in mind.

• An attack in which the threat actor is almost always trying to make money as fast as possible.

• A type of threat in which threat actors actively pursue and compromise a target entity's infrastructure while maintaining anonymity.

• An attack carried out by a sovereign state threat agent.

Who is considered an insider in the context of threat agents?

• A threat agent who carries out attacks on behalf of an organization and targets competing companies.

• A threat agent who has authorized access to an organization and either intentionally or unintentionally carries out an attack.

• Any threat agent who uses technical knowledge to bypass security and exploit a vulnerability.

• A sovereign state threat agent that may wage an all-out war on a target.