Question 1

An attack where social engineering techniques are used to masquerade as a trusted party to obtain important information such as passwords from the victim.

Options :

A : Denial of service attack

B : Spear Phishing

C : Advanced Persistent Threats (APTs)

D : Man in the middle attack

Answer: B

Question 2

Spyware

Options :

A : An attack where social engineering techniques are used to masquerade as a trusted party to obtain important information such as passwords from the victim

B : Gathers information about a person or organization without the knowledge of that person or organization.

C : Designed to gain access to targeted computer systems, still information, or disrupt computer operations And attack made by trying all possible combinations of passwords or encryption keys until the correct one is found.

Answer: B

Question 3

A weakness in the design, implementation, operation or internal control of a process that could expose the system to adverse threats from threat events

Options :

A : Vulnerability

B : Confidentiality

C : Authorization

D : Change Management

Answer: A

Question 4

Backdoor

Options :

A : A means of regaining access to a compromised system by installing software or configuring existing software to enable remote access under attacker defined conditions

B : A large automated and distributed network previously compromised computers that can be simultaneously controlled to launch large-scale attacks such as denial of service

C : When a program or process tries to store more data in a buffer (temporary data storage area) than it was intended to hold

D : Something of either tangible or intangible value that is worth protecting, including people, information, infrastructure, finances and reputation

Answer: A

Question 5

Threat

Options :

A : Anything that is capable of acting against an asset in a manner that can result in harm

B : Hides malicious processes to prevent detection, modifies the underlying operating system.

C : Something of either tangible or intangible value that is worth protecting, including people, information, infrastructure, finances and reputation

D : Protection from unauthorized modification. One of the three governing principles of cyber security

Answer: A