CSF Practice 2 - Chapters 1 to 3

What are the three classification of hackers? Describe the characteristics of each classification.

Answer explanation

White, Gray, Black hats (Chapter 1 ppt 18)

White hat attackers break into networks or computer systems to discover weaknesses in order to improve the security of these systems.

Gray hat attackers are somewhere between white and black hat attackers. The gray hat attackers may find a vulnerability and report it to the owners of the system if that action coincides with their agenda.

Black hat attackers are unethical criminals who violate computer and network security for personal gain, or for malicious reasons, such as attacking networks.

What tools Criminals use to capture data streams over a network? How the tools work?

Answer explanation

packet-sniffing (Chapter 1 ppt 26)

Packet sniffers work by monitoring and recording all information coming across a network.

The Workforce Framework categorizes cybersecurity work into seven categories. What are the seven categories?

Answer explanation

Operate and Maintain (Chapter 1 ppt 38)

Protect and Defend

Investigate

Collect and Operate

Analyze

Oversight and Development

Securely Provision

​ ​ (a)   who may find a vulnerability and report it to the owners of the system if that action coincides with their agenda

• White Hat Hackers
• Black Hat Hackers
• Script Kiddies
• Gray Hat Hackers

(a)   who violate computer and network security for personal gain, or for malicious reasons, such as attacking networks

• White Hat Hackers
• Black Hat Hackers
• Script Kiddies
• Gray Hat Hackers

(a)   hackers who break into networks or computer systems to discover weaknesses in order to improve the security of these systems

• White Hat Hackers
• Black Hat Hackers
• Script Kiddies
• Gray Hat Hackers

(a)   having little or no skills, often using existing tools or instructions to launch attacks

• White Hat Hackers
• Black Hat Hackers
• Script Kiddies
• Gray Hat Hackers

As more organizations build large databases containing all of our personal data, the need for cybersecurity professionals increases.  Identify the different types of personal data records which may come from established organizations.

Answer explanation

Attacks can originate from within an organization or from outside of the organization. Describe how internal security threats may be violated within an organization. Give an example of an internal user who may cause damage to an organization.

Answer explanation

(Chapter 1 ppt 19 to 20) As internal users have direct access to the building and its infrastructure devices. Internal attackers typically have knowledge of the corporate network, its resources, and its confidential data. They may also have knowledge of security countermeasures, policies and higher levels of administrative privileges. Employee/Ex-employee, Contract Partners or Trusted Partners.

Describe how external security threats may be violated from outside of the organization. Give an example of an external user who may cause damage to an organization

Answer explanation

(Chapter 1 ppt 19 to 20) External threats from amateurs or skilled attackers can exploit vulnerabilities in networked devices, or can use social engineering, such as trickery, to gain access. External attacks exploit weaknesses or vulnerabilities to gain access to internal resources. Organised Attackers, Hackers, Amateurs