Which of the following scenarios best exemplifies a phishing attack?A user connects to a public wireless network. An unauthorized individual intercepts data transmitted on the network, looking for private information that can be used to gain access to theAuser's accounts.A user's e-mail account is overwhelmed with messages containing large attachments, which causes the account to exceed the maximum amount of data allowed and temporarily prevents theBuser from sending and receiving new messages.A user receives an e-mail from a sender offering technical help with the user's computer. The e-mail prompts the user to start a help session by clicking a provided link and entering theusername and password associated with the user's computer.DA user chooses a weak password for an online account. An unauthorized individual successfully guesses the user's password from a list of common passwords.

Phishing attack is a type of cyber attack.

Which of the following scenarios best exemplifies a phishing attack? A user connects to a public wireless network. An unauthorized individual intercepts data transmitted on the network, looking for private information that can be used to gain access to the A user's accounts. A user's e-mail account is overwhelmed with messages containing large attachments, which causes the account to exceed the maximum amount of data allowed and temporarily prevents the user from sending and receiving new messages. A user receives an e-mail from a sender offering technical help with the user's computer. The e-mail prompts the user to start a help session by clicking a provided link and entering the username and password associated with the user's computer. D A user chooses a weak password for an online account. An unauthorized individual successfully guesses the user's password from a list of common passwords.

Which of the following scenarios best exemplifies a phishing attack? A user connects to a public wireless network. An unauthorized individual intercepts data transmitted on the network, looking for private information that can be used to gain access to the A user's accounts. A user's e-mail account is overwhelmed with messages containing large attachments, which causes the account to exceed the maximum amount of data allowed and temporarily prevents the user from sending and receiving new messages. A user receives an e-mail from a sender offering technical help with the user's computer. The e-mail prompts the user to start a help session by clicking a provided link and entering the username and password associated with the user's computer. D A user chooses a weak password for an online account. An unauthorized individual successfully guesses the user's password from a list of common passwords.

A+ Guide To It Technical Support

10th Edition

ISBN:9780357108291

Author:ANDREWS, Jean.

Publisher:ANDREWS, Jean.

Chapter16: Securing And Sharing Windows Resources

Section: Chapter Questions

Problem 3TC

See similar textbooks

Similar questions

A CEO fires her administrative assistant after the assistant was caught stealing companyfunds. Over the weekend, the administrative assistant hacks into the CEO’s private emailaccount and steals some personal data. What type of attack did the former employee most likely use to accomplish this exploit?a. Brute force attackb. War drivingc. Logic bombd. Deauthenticatione. Man-in-the-middle
Q3A- Bob has set up a website to collect donations for his new sponge. Alice has decided to donate money to Bob’s sponge and submitted a transaction with her financial details and a donation sum of $10. The financial transaction has been altered before reaching it to the server, and the donation sum was changed to $100.Answer the following questions relating to the described scenario 1. Which one/more of the following types of attack has occurred here? Interruption Modification Interception Fabrication
a) Classify the following attacks and their impact on the security goals 1. Assume that you have sent a text file to your friend over the LAN, the file content is viewed by all unauthorized persons. 2. Your friend has received 1000 rupees from your account and later he denied your transaction. 3. Your friend is flooding the fake packets at your wi-Fi access point. 4. Assumed that you have a username and password unethically to log in to the network. b) Assume that you substitute the plain text characters with different characters and send it to your friend. Is your friend required to learn cryptography or stenography techniques to read the hidden text?
21) In a pharming attack, the goal of the criminal is to _____. A. steal a victim's email credentials to illegally login into their computer network B. steal the victim's DNS server database entries in order clone sites to steal their information C. steal the victim's network information in order to crash the network D. misdirect website traffic to bogus websites where the victim's information will be stolen 22) What made the Mirai botnet so different from other botnets? A. It attacked highly secure government data. B. It was very small and insignificant. C. It used a variety of devices, not just computers. D. It wasn't different at all.
It is possible that the integrity of the whole network may be jeopardized if malicious traffic were to be diverted from one VLAN to another. It is necessary to recognize the typical pattern of an attacker's assaults. Please share any preventive methods that come to mind in the comments section.
Which of the following security attributes is required to verifying the identity of a user and evict imposters? a. Confidentiality b. Availability c. Integrity d. Authentication ___________ Which of the following sentences is incorrect with respect to Shodan? a. Shodan can be used to find open ports b. Shodan is a search engine for Internet connected devices c. Shodan can be used to find online computers d. Shodan can be used to perform an ARP attack -------------------- Which of the following is an example of a security threat to a web server? a. Remote access via Telnet b. Managed open ports c. Patched services d. Long passwords
Paityn installs wireless networks in residential settings. Which of the following is not an attack that he should be concerned with protecting against? a. Malware injection b. Wireless transmission interception c. Evil twin d. Data theft
Johnathan is the network engineer of an organization that restricts the use of certain webpages. As he does not have any pending work, he decides to take a break and watch a movie online until a task is assigned to him. Analyze which of the following actions is best suited for him in this situation so that the IP address of the organization is not compromised. a. Use a network-based firewall for this purpose b. Use IDS to bypass security protocols c. Use proxy servers to mask Internet activities d. Use a packet-filtering firewall for this purpose
12) When using HTTPS, the web browser's IP address is encrypted before being sent to the server. True False 13) The HSTS flag is used to protect against which type of threat? A man-in-the middle attacker who intercepts https requests and rewrites them as http requests A man-in-the middle attacker who presents forged SSL certificates in order to intercept communications. A phishing attacker who impersonates a legitimate website. A man-in-the-middle attacker who forces downgrades to outdated encryption versions used in TLS. 14) Suppose a website implements a login page with a form. Answer the following 8 questions as True (yes) or False (no). If the form is submitted via GET request using HTTP, can a network adversary (i.e., one who can observe all network communications) obtain the password? True False 15) If the form is submitted via GET request using HTTP, can a browser adversary (i.e., one who can locally observe the URLs requested by the user) obtain the password?…
17) If the form is submitted via POST request using HTTP, can a browser adversary obtain the password? True False 18) If the form is submitted via GET request using HTTPS, can a network adversary obtain the password? True False 19) If the form is submitted via GET request using HTTPS, can a browser adversary obtain the password? True False 20) If the form is submitted via POST request using HTTPS, can a network adversary obtain the password? True False 21) If the form is submitted via POST request using HTTPS, can a browser adversary obtain the password? True False 22) Suppose that a merchant's website stores hashed passwords that have not been salted. Describe an attack to obtain passwords that could be prevented using salted password.
How do you filter a virus that wants to send out spam via SMTP from your machine? A. Inbound rule using port filtering B. Inbound rule using IP Address filtering C. Outbound rule using port filtering
15) If the form is submitted via GET request using HTTP, can a browser adversary (i.e., one who can locally observe the URLs requested by the user) obtain the password? True False 16) If the form is submitted via POST request using HTTP, can a network adversary obtain the password? True False