Security + 6

Front 1

What is:

Spyware

Back 1

A program that monitors the user's activity and reports it to another party without

informing the user. It is spread by users who inadvertently ask for it by downloading other

programs, visiting infected sites, and so on.

Front 2

What is:

Adware

Back 2

Can have the same qualities as spyware, but it's primary purpose is to display ads

and generate revenue for its creator.

Front 3

What are:

Rootkits

Back 3

Software programs that have the ability to hide certain things, such as running

processes, from the OS. It does so by manipulating function calls to the OS and filtering out

information that would normally appear.

Front 4

What is a:

Trojan Horse

Back 4

A program that enters a system or network under the guise of another program.

It may be included as an attachment or as part of an installation program. It can create a

back–door or replace a valid program during installation.

Front 5

What is a:

Logic Bomb

Back 5

A program or code snippet that executes when a certain predefined event

occurs.

Front 6

What is a:

Backdoor

Back 6

A troubleshooting/developer hook into systems that often circumvent normal

authentication.

Or

The act of gaining access to a network and inserting a program/utility that creates an entrance

for an attacker.

Front 7

What is a:

Botnet

Back 7

Malicious software running on a zombie and under the control of a command &

control.

Front 8

What is:

Ransomware

Back 8

Software, often delivered through a Trojan, that takes control of a system and

demands that a third party be paid. The "control" can be accomplished by encrypting the hard

drive, changing the user's password, etc.

Front 9

What is a:

(Computer) Virus

Back 9

A piece of software designed to infect a computer system.

Front 10

What is a:

Polymorphic Virus

Back 10

A virus that changes form in order to avoid detection.

Front 11

What is a:

Stealth Virus

Back 11

A virus that attempts to avoid detection by masking itself from applications.

Front 12

What

is a:

Retrovirus

Back 12

A virus that attacks or bypasses the antivirus software installed on a

computer.

Front 13

What is a:

Multipartite Virus

Back 13

A virus that attacks a system in multiple ways.

Front 14

What is an:

Armored Virus

Back 14

A virus that is designed to make itself difficult to detect or analyze.

Front 15

What is a:

Companion Virus

Back 15

A virus that attaches itself to legitimate programs and then creates a

program with a different filename extension, effectively hiding from the user. When the

legitimate program is executed, the virus runs instead.

Front 16

What is a:

Phage Virus

Back 16

A virus that modifies and alters other programs and databases.

Front 17

What is a:

Macro Virus

Back 17

A virus that exploits the enhancements made to many applications, which are

used by programmers to expand the capability of applications.

Front 18

What is:

Spam

Back 18

Unwanted, unsolicited email.

Front 19

What is a:

Denial–of–Service (DoS) attack

Back 19

An attack that prevents access to resources by users

authorized to use those resources.

Front 20

What is a:

Distributed Denial–of–Service (DDos) attack

Back 20

Amplifies the concepts of a DoS attack by using

multiple computer systems (often through botnets) to conduct an attack against a single

organization.

Front 21

What is:

IP Spoofing

Back 21

An attack where the goal is to make the data look as if it came from a trusted host

when it didn't.

Front 22

What is:

ARP spoofing

Back 22

An attack where the MAC address of the data is faked. By faking this value, it

is possible to make it look as if the data came from a network that it did not.

Front 23

What is:

DNS spoofing

Back 23

An attack that happens when a DNS server is given information about a name

server that it thinks is legitimate when it isn't.

Front 24

What is a:

Pharming attack

Back 24

A form of redirection in which traffic intended for one host is sent to another.

This can be accomplished on a small scale by changing entries in the hosts file and on a large

scale by using DNS spoofing.

Front 25

What is:

Phishing

Back 25

A form of social engineering in which you ask someone for a piece of information by

making it look as if is a legitimate request.

Front 26

What is:

Spear Phishing

Back 26

A unique form of phishing in which a message is made to look as it came from

someone that the user knows and trusts.

Front 27

What is:

Vishing

Back 27

An elevated form of social engineering that combines phishing with VOIP.

Front 28

What is a:

Xmas Attack

Back 28

A popular attack that uses Nmap. It is an advanced scan that tries to get around

firewall detection and look for open ports.

Front 29

What is a:

Man–in–the–Middle Attack

Back 29

An attack that clandestinely places something between a server

and the user. It intercepts data and then sends the information to the server as if nothing is

wrong.

Front 30

What is a:

Replay Attack

Back 30

A kind of access or modification attack, it captures information to be replayed

later.

Front 31

What is a:

Smurf Attack

Back 31

A distributed denial–of–service attack in which large numbers of ICMP packets

with the intended victim's spoofed source IP are broadcast to a computer network using an IP

Broadcast address. Most devices on a network will, by default, respond to this by sending a

reply to the spoofed source IP address.

Front 32

What is a:

Brute–Force Attack

Back 32

An attack in which attempts to guess a password are made until a

successful guess occurs.

Front 33

What is a:

Dictionary Attack

Back 33

An attack that uses a dictionary of common words to attempt to find the

user's password.

Front 34

What is a:

Hybrid Password Attack

Back 34

An attack that typically uses a combination of dictionary entries and

brute force.

Front 35

What is a:

Birthday Attack

Back 35

A type of cryptographic attack that exploits the mathematics behind the

birthday problem in probability theory. This attack can be used to abuse communication

between two or more parties. The attack depends on the higher likelihood of collisions found

between random attack attempts and a fixed degree of permutations

Front 36

What is a:

Rainbow Table Attack

Back 36

An attack that focuses on identifying a stored value. By using values in

an existing table of hashed phrases or word and comparing them to values found, this attack

can reduce the amount of time needed to crack a password.

Front 37

What is:

Privilege Escalation

Back 37

Involves a user gaining more privileges than they should have. With their

elevated permissions, they can perform tasks they should not be allowed to do.

Front 38

What is:

Typosquatting and URL Hijacking

Back 38

The act of registering domains that are similar to those for a

known entity but based on a misspelling or typographical error.

Front 39

What is a:

Watering Hole Attack

Back 39

An attack where the attacker identifies a site that is visited by those they

are targeting, poisoning that site, and then waiting for the results.

Front 40

What is:

Cross–Site Scripting (XSS)

Back 40

When an attacker uses a client–side script to trick a user who visits the site into have the code execute locally.

Front 41

What is:

SQL Injection

Back 41

An attack where an attacker manipulates the database code to take advantage

of a weakness in it.

Front 42

What is:

LDAP Injection

Back 42

An attack that exploits weaknesses in LDAP.

Front 43

What is:

XML Injection

Back 43

An attack that occurs when an attacker enters values that query XML with

values that take advantage of exploits.

Front 44

What is:

Directory Traversal

Back 44

When an attacker is able to gain access to restricted directories though

HTTP.

Front 45

What is:

Buffer Overflow

Back 45

When an application receives more data than it's programmed to

accept.

Front 46

What is:

Integer Overflow

Back 46

When space that is reserved for numbers receives more data than it's

programmed to accept.

Front 47

What are:

Zero–Day Exploits

Back 47

A vulnerability is an undisclosed and uncorrected.

Front 48

What is:

Session Hijacking

Back 48

When the item used to validate a user's session, such as a cookie, is stolen

and used by another to establish a session with a host that thinks it is still communicating with

the first party.

Front 49

What is:

Header Manipulation

Back 49

An attack that uses various methods to change values in HTTP headers and falsify

access.

Front 50

What is a:

Vulnerability Scanner

Back 50

An application that checks a network for any known security

holes.

Front 51

What is a:

Honey Pot

Back 51

A computer that has been designated as a target for computer attacks.

Front 52

What is:

Banner Grabbing

Back 52

An enumeration technique used to glean information about a computer

system on a network and the services running on its open ports.