Malicious Attacks and Vulnerabilities Quiz

Which of the following best describes a threat?

• A valuable resource to the organization

• A weakness that can be exploited

• Any action that can damage or compromise an asset

• The likelihood that something bad will happen

A vulnerability is:

• A valuable item that must be protected

• The probability of loss or damage

• A weakness that can be exploited

• An intentional action to destroy data

Which CIA tenet is violated when unauthorized disclosure occurs?

• Confidentiality

• Integrity

• Availability

• Authenticity

An alteration threat directly affects:

• Confidentiality

• Integrity

• Availability

• Accountability

Denial-of-service attacks target which principle of the CIA triad?

• Confidentiality

• Integrity

• Availability

• Accountability

Which of the following is an asset?

• Port scanner

• Financial data

• Keystroke logger

• Malware

Which type of hacker is considered 'ethical' and tests security systems?

• White-hat

• Black-hat

• Gray-hat

• Crackers

Which of the following is a fabrication attack?

• Phishing email tricking a user to log in

• Replay attack

• Data corruption in transit

• DoS attack

Which is NOT an example of an active attack?

• Brute-force password cracking

• IP spoofing

• Hijacking a session

• Eavesdropping on packets

A dictionary attack exploits:

• Poor password choices

• Database vulnerabilities

• Misconfigured firewalls

• Weak encryption protocols