INTRODUCTION – A brief overview of types of actors and their motives

TYPES OF ACTORS AND THEIR MOTIVES

1. What are the four (4) main types of actors identified in the video A brief overview of types of actors and their motives?

2. Which of these common motivations is often attributed to a hacktivist?

3. In the video Hacking organizations, which three (3) governments were called out as being active hackers?

4. Which four (4) of the following are known hacking organizations?

5. Which of these hacks resulted in over 100 million credit card numbers being stolen?

AN ARCHITECT’S PERSPECTIVE ON ATTACK CLASSIFICATIONS

1. Which of the following statements is True?

2. The purpose of security services includes which three (3) of the following?

3. Which statement best describes access control?

4. The International Telecommunication Union (ITU) X.800 standard addresses which three (3) of the following topics?

5. Protocol suppression, ID and authentication are examples of which?

6. The motivation for more security in open systems is driven by which three (3) of the following factors?

7. True or False: The accidental disclosure of confidential data by an employee is considered a legitimate organizational threat.

8. True or False: The accidental disclosure of confidential information by an employee is considered an attack.

9. A replay attack and a denial of service attack are examples of which?

10. The International Telecommunication Union is an organization that is described by which of the following statements?

MALWARE AND AN INTRODUCTION TO THREAT PROTECTION

1. True or False: An application that runs on your computer without your authorization but does no damage to the system is not considered malware.

2. How would you classify a piece of malicious code designed to cause damage and spreads from one computer to another by attaching itself to files but requires human actions in order to replicate?

3. How would you classify a piece of malicious code designed collect data about a computer and its users and then report that back to a malicious actor?

4. A large scale Denial of Service attack usually relies upon which of the following?

5. Antivirus software can be classified as which form of threat control?

Additional Attack examples today

1. Which of the following measures can be used to counter a mapping attack?

2. In order for a network card (NIC) to engage in packet sniffing, it must be running in which mode?

3. Which countermeasure can be helpful in combating an IP Spoofing attack?

4. Which two (2) measures can be used to counter a Denial of Service (DOS) attack?

5. Which countermeasure should be used agains a host insertion attack?

ATTACKS AND CYBER RESOURCES

1. Which is not one of the phases of the intrusion kill chain?

2. Which social engineering attack involves a person instead of a system such as an email server? 

3. Which of the following is an example of a social engineering attack?

4. True or False: While many countries are preparing their military for a future cyberwar, there have been no “cyber battles” to-date.

A DAY IN THE LIFE OF A SOC ANALYST

1. Which tool did Javier say was crucial to his work as a SOC analyst?

A BRIEF OVERVIEW OF TYPES OF ACTORS AND THEIR MOTIVES

1. Which hacker organization hacked into the Democratic National Convention and released Hillary Clinton’s emails?

2. What challenges are expected in the future?

3. Why are cyber attacks using SWIFT so dangerous?

4. Which statement best describes Authentication?

5. Trusted functionality, security labels, event detection, security audit trails and security recovery are all examples of which type of security mechanism?

6. If an organization responds to an intentional threat, that threat is now classified as what?

7. An attack that is developed particularly for a specific customer and occurs over a long period of time is a form of what type of attack?

8. A political motivation is often attributed to which type of actor?

9. The video Hacking organizations called out several countries with active government sponsored hacking operations in effect. Which one of these was among those named?

10. Which of these is not a known hacking organization?

11. Which type of actor hacked the 2016 US Presidential Elections?

12. True or False: Passive attacks are easy to detect because the original messages are usually altered or undelivered.

13. True or False: Authentication, Access Control and Data Confidentiality are all addressed by the ITU X.800 standard.

14. True or False: Only acts performed with intention to do harm can be classified as Organizational Threats

15. How would you classify a piece of malicious code designed to cause damage, can self-replicate and spreads from one computer to another by attaching itself to files?

16. Botnets can be used to orchestrate which form of attack?

17. Policies and training can be classified as which form of threat control?

18. Which type of attack can be addressed using a switched Ethernet gateway and software on every host on your network that makes sure their NICs is not running in promiscuous mode.

19. A flood of maliciously generated packets swamp a receiver’s network interface preventing it from responding to legitimate traffic. This is characteristic of which form of attack?

20. A person calls you at work and tells you he is a lawyer for your company and that you need to send him specific confidential company documents right away, or else! Assuming the caller is not really a lawyer for your company but a bad actor, what kind of attack is this?

21. Which type of actor was not one of the four types of actors mentioned in the video A brief overview of types of actors and their motives?

22. Cryptography, digital signatures, access controls and routing controls considered which?

23. Traffic flow analysis is classified as which?

24. True or False: An individual hacks into a military computer and uses it to launch an attack on a target he personally dislikes. This is considered an act of cyberwarfare.

CONCLUSION – A brief overview of types of actors and their motives