CK Cyber 2 - LO1.2.C

What is a cybersecurity threat?

• A harmless software update

• A potential disruption, harm, or loss to a computer system, computer network, or associated data

• A routine maintenance task

• A new software feature

Which of the following best describes social engineering?

• A method to improve network speed

• An attempt by an adversary to manipulate a human target to divulge confidential information

• A technique to encrypt data

• A way to design secure software

What is eavesdropping in the context of cybersecurity?

• Listening to music online

• Gaining access to digital information and recording or copying the data

• Watching a live video stream

• Reading a public blog

In an on-path attack, also known as a Man-in-the-Middle attack, what does the adversary do?

• Sends spam emails

• Interrupts a data stream between two parties and alters the data

• Installs antivirus software

• Creates a backup of data

What is the primary goal of social engineering?

• To improve user interface design

• To manipulate a human target to divulge confidential information

• To develop new software applications

• To enhance network security

Which of the following is NOT a characteristic of an on-path attack?

• The adversary captures data between two parties

• Both parties are aware of the adversary's presence

• The adversary alters the data before sending it on

• Both parties think they are communicating directly with each other

What is the main difference between eavesdropping and an on-path attack?

• Eavesdropping involves altering data, while on-path attacks do not

• Eavesdropping is passive, while on-path attacks involve data alteration

• Eavesdropping is more secure than on-path attacks

• Eavesdropping requires physical access to the network

Which of the following is an example of a social engineering attack?

• A hacker using a brute force attack to guess passwords

• A phishing email that tricks a user into providing their login credentials

• A virus that deletes files on a computer

• A firewall blocking unauthorized access

What is the primary risk associated with eavesdropping?

• Loss of physical hardware

• Unauthorized access to sensitive information

• Increased internet speed

• Improved data encryption

Which of the following best describes an injection threat?

• A method to inject new features into software

• A technique to introduce malicious code into a program

• A way to improve data transmission speed

• A process to update software automatically