Cybersecurity and Information Security Quiz

All three options (Dumpster Diving, Shoulder Surfing, and Impersonating) are legitimate methods of social engineering attacks. Dumpster diving involves searching through trash for sensitive information, shoulder surfing is observing someone's private information by looking over their shoulder, and impersonating involves pretending to be someone else to gain access or information.

MS08-067 was the Microsoft security patch that addressed the vulnerability exploited by the Conficker worm. Conficker was one of the most widespread malware outbreaks in history, infecting millions of computers by exploiting a Windows Server service vulnerability.

People are widely considered the weakest link in security because they can be manipulated, make mistakes, or bypass technical controls through social engineering. Even the most sophisticated security systems can be compromised through human error, phishing attacks, or credential sharing.

Hacking attempts can be categorized as accidental (unintentional access or exposure), ethical (authorized penetration testing and security research), or intentional (deliberate unauthorized access). This classification framework covers the full spectrum of hacking motivations and methods.

A script kiddie is an amateur who lacks technical expertise to develop their own hacking tools or exploits. Instead, they use pre-written scripts and programs created by skilled hackers to attack systems. The term emphasizes their lack of understanding and reliance on existing tools.

Web 2.0's community-driven, information-sharing model creates multiple security risks: the exposure of personal data on social platforms facilitates social engineering attacks, while rapid API development often prioritizes functionality over security, creating vulnerabilities in automated processes. Both factors significantly threaten information security.

GIFAR is a hacking technique that involves combining a GIF image file with a Java archive (JAR) file. This hybrid file can execute malicious code and potentially steal viewer credentials when loaded in a vulnerable browser.

This is a duplicate of question 57468. GIFAR is a hacking technique combining GIF and JAR files that can execute malicious code and steal credentials when rendered by vulnerable browsers.

Data Leakage Prevention (DLP) methods include network-based solutions (monitoring network traffic) and host-based solutions (installed on endpoints). Application-based DLP is also a category, making 'Both A & B' the most accurate single choice.

Data Leakage Prevention solutions can protect data at rest (stored data), in motion (data being transmitted), and at endpoints (devices where data is accessed). This comprehensive coverage is a key feature of enterprise DLP solutions.

Besides technical DLP solutions, organizations should implement employee training on data handling, establish company-wide data policies, and use encryption with outbound filtering. A holistic approach combining people, process, and technology is most effective.

Phishing tricks users into revealing credentials through fake emails, compromising email security. E-mail bombs flood systems with massive volumes to cause denial-of-service. Spam consumes bandwidth and storage, making it harder to identify legitimate emails. All three attack vectors weaken corporate email systems.

An e-mail bomb is a denial-of-service attack where an address is sent huge volumes of email to overflow the mailbox or overwhelm the hosting server. Phishing (A) involves fake websites to steal credentials. Spoofing (C) alters email headers to fake the sender. Spam (D) is unsolicited bulk mail.

Eye/iris recognition is one of the most accurate and stable biometric methods over time because iris patterns remain largely unchanged throughout life. Face appearance changes significantly with age, weight, and expression. Handwriting and signatures vary with mood, health, and time, making them less consistent.

In biometric systems, identification is the process of determining a person's identity from a database (1:N matching - "who is this?"), while verification confirms a claimed identity (1:1 matching - "is this person who they claim to be?"). Authentication is the broader concept, but the specific biometric methods are identification and verification.