Cyber-Security Exam 1 Questions and
Correct Answers 2026-2027 Updated.
Security Problem - Answer The value of the information on technology is more valuable than
the technology itself
Attacker's Profile - Answer Generally inexperienced young people, script kiddies
Electronic Crime - Answer When the computer is a target, or a computer is used to commit
the crime
Targets of Opportunity - Answer A hacker attacks a vulnerability, not necessarily the company
itself
Specifically Targeted Attacks - Answer Driven by a purpose, a hacktivist
Structured Threats - Answer Planned, more funded, longer periods of activity
Unstructured Threats - Answer Less funded, shorter periods of time, fewer people
Difficulties in Defending Against Attacks - Answer Increased speed, sophistication, availability
of attacks
Security vs. Convenience - Answer The higher the security level the lower the convenience
Confidentiality - Answer Security actions that ensure that only authorized parties can view the
information and prevents the disclosure to others.
Integrity - Answer Security actions that ensure that the information is correct and no
unauthorized person or malicious software has altered that data.
Availability - Answer Security actions that ensures that data is accessible to authorized users.
Layers of Information Security - Answer Confidentiality, integrity, availability
Laws Protecting Electronic Data Privacy - Answer HIPPA, Sarbanes-Oxley Act of 2002, Gramm-
Leach-Bliley Act, California Database Security Breach
, Cyber-Terrorism - Answer Attacks may be ideologically motivated
Targets of Cyber-Terrorism - Answer Banking, military, energy, transportation, water
Cybercriminals - Answer A generic term used to describe individuals who launch attacks
against other users and their computers; also describes a loose-knit network of attackers,
identity thieves, and financial fraudsters.
Script Kiddies - Answer Individuals who want to break into computers to create damage yet
lack the advanced knowledge of computers and networks needed to do so.
Comprehensive Security Strategy - Answer Block attacks, update defenses, minimize losses,
send secure information
Social Engineering - Answer A means of gathering information for an attack by relying on the
weaknesses of individuals.
Phishing - Answer Sending an e-mail or displaying a web announcement that falsely claims to
be from a legitimate enterprise in an attempt to trick the user into surrendering private
information.
Shoulder Surfing - Answer Viewing information that is entered by another person.
Dumpser Diving - Answer Digging through trash receptacles to find information that can be
useful in an attack.
Key Logger - Answer Hardware or software that captures and stores each keystroke that a user
types on the computer's keyboard.
Man-In-The-Middle - Answer
Offline Cracking - Answer
Dictionary Attack - Answer A password attack that compares common dictionary words
against those in a stolen password file.
Correct Answers 2026-2027 Updated.
Security Problem - Answer The value of the information on technology is more valuable than
the technology itself
Attacker's Profile - Answer Generally inexperienced young people, script kiddies
Electronic Crime - Answer When the computer is a target, or a computer is used to commit
the crime
Targets of Opportunity - Answer A hacker attacks a vulnerability, not necessarily the company
itself
Specifically Targeted Attacks - Answer Driven by a purpose, a hacktivist
Structured Threats - Answer Planned, more funded, longer periods of activity
Unstructured Threats - Answer Less funded, shorter periods of time, fewer people
Difficulties in Defending Against Attacks - Answer Increased speed, sophistication, availability
of attacks
Security vs. Convenience - Answer The higher the security level the lower the convenience
Confidentiality - Answer Security actions that ensure that only authorized parties can view the
information and prevents the disclosure to others.
Integrity - Answer Security actions that ensure that the information is correct and no
unauthorized person or malicious software has altered that data.
Availability - Answer Security actions that ensures that data is accessible to authorized users.
Layers of Information Security - Answer Confidentiality, integrity, availability
Laws Protecting Electronic Data Privacy - Answer HIPPA, Sarbanes-Oxley Act of 2002, Gramm-
Leach-Bliley Act, California Database Security Breach
, Cyber-Terrorism - Answer Attacks may be ideologically motivated
Targets of Cyber-Terrorism - Answer Banking, military, energy, transportation, water
Cybercriminals - Answer A generic term used to describe individuals who launch attacks
against other users and their computers; also describes a loose-knit network of attackers,
identity thieves, and financial fraudsters.
Script Kiddies - Answer Individuals who want to break into computers to create damage yet
lack the advanced knowledge of computers and networks needed to do so.
Comprehensive Security Strategy - Answer Block attacks, update defenses, minimize losses,
send secure information
Social Engineering - Answer A means of gathering information for an attack by relying on the
weaknesses of individuals.
Phishing - Answer Sending an e-mail or displaying a web announcement that falsely claims to
be from a legitimate enterprise in an attempt to trick the user into surrendering private
information.
Shoulder Surfing - Answer Viewing information that is entered by another person.
Dumpser Diving - Answer Digging through trash receptacles to find information that can be
useful in an attack.
Key Logger - Answer Hardware or software that captures and stores each keystroke that a user
types on the computer's keyboard.
Man-In-The-Middle - Answer
Offline Cracking - Answer
Dictionary Attack - Answer A password attack that compares common dictionary words
against those in a stolen password file.
