DSP quiz 1 drei

can disrupt e-commerce, cause data loss, threaten privacy, and compromise information integrity

Weaknesses that can be exploited by attackers

The source of danger that may exploit a vulnerability

The act of taking advantage of a vulnerability

Actions taken to reduce or eliminate threats

The likelihood of a threat exploiting a vulnerability

The path used by a threat actor to access a system or network

An attack that makes systems unavailable

A DoS attack launched from multiple systems

Any person, device, group, or nation that causes an attack

Ethical hacker who improves security

Hacker who breaks rules without malicious intent

Malicious hacker who exploits systems

Entity that sells discovered vulnerabilities

Politically or socially motivated attacker

Attacker who commits cybercrime for profit

Self-replicating malware that spreads automatically

Malware that attaches to legitimate programs

Malware disguised as legitimate software

Listening to network communications

Unauthorized alteration of data

Impersonating a trusted IP address

Stealing or guessing passwords

Intercepting communication between two parties

Capturing network packets

Information-gathering attack

Unauthorized system access attack

Availability-disrupting attack

Attack that steals user credentials

Attack that pretends to be a trusted device

Exploiting trust relationships

Redirecting traffic through another system

Exploiting memory handling errors

Using ICMP to scan and map networks

Overwhelming a target using reflected traffic

Intercepting and altering traffic

Taking control of an active session

Overloading a server with SYN packets

Forcing TCP connections to close

Taking over a TCP session

Flooding a target with UDP packets

Unsolicited ARP reply

Corrupting ARP tables

Injecting false DNS records

Rapidly changing IP addresses for malicious domains

Using multiple domains and IPs

Using DNS to tunnel data

Rogue DHCP server providing false configuration

Protection of data privacy

Ensuring data accuracy

Ensuring system accessibility

Information security model

Layered security approach

System that enforces access control policies

System that detects attacks

System that detects and blocks attacks

Known attack pattern

Ensures data has not been altered

Legacy 128-bit hash function

Secure hash family

Hash with a secret key

Encryption using the same key

Encryption using public and private keys

Public-key encryption algorithm

Key exchange without prior communication

Symmetric encryption standard

Legacy symmetric encryption

Triple-encryption DES

Software-optimized encryption

Stream cipher family

Digital signature standard

Digital signature algorithm

Asymmetric encryption algorithm

Efficient public-key cryptography