Identity Security Final
Authentication - Answer - ✔The steps that ensure that the individual is who he or she
claims to be.
brute force attack - Answer - ✔A password attack in which every possible combination
of letters, numbers, and characters is used to create encrypted passwords that are
matched against those in a stolen password file.
dictionary attack - Answer - ✔A password attack that compares common dictionary
words against those in a stolen password file.
password - Answer - ✔A secret combination of letters, numbers, and/or characters that
only the user should have knowledge of.
shoulder surfing - Answer - ✔Viewing information that is entered by another person.
typo squatting - Answer - ✔Redirecting a user to a fictitious website based on a
misspelling of the URL. Also called URL hijacking.
vishing - Answer - ✔A phishing attack in which the attacker calls the victim on the
telephone.
whaling - Answer - ✔A phishing attack that targets wealthy individuals, who typically
would have larger sums of money in a bank account that an attacker could access.
authority - Answer - ✔Social engineering tool that an attack may use when
impersonating a CEO
change of address form - Answer - ✔identity thieves can complete a "______ __
________ ____" to divert you mail to another location.
Fair and Accurate Credit Transactions Act - Answer - ✔Law that contains rules
regarding consumer privacy
Facta - Answer - ✔Grants consumers the right to request one free credit report from
each firm every 12 months
social networking - Answer - ✔involes grouping individuals into clusters or groups based
on likes and interest
30 - Answer - ✔if a problem if founds on credit report, first send a letter to the agency.
they have ___ amount of daye to investigate and respond
, spear phishing - Answer - ✔A phishing attack that targets only specific users.
organizational charts - Answer - ✔documents identifying individuals in positions of
authority
Pretexting - Answer - ✔invented senerio used to gain trust to lure you into providing
information
dumpster diving - Answer - ✔Involves digging through trash receptacles to find
computer manuals, printouts, or password lists that have been thrown away
Zombie - Answer - ✔infected robot computer
worm - Answer - ✔designed to enter a computer
Denying services - Answer - ✔botnets that flood a web server of request to overwhelm it
so it cant respond to legitimate request
signature - Answer - ✔av software on a computer must have its ___ files regularly
updated by downloads from the internet
bot herder - Answer - ✔An attacker who controls a botnet.
Botnet - Answer - ✔A logical computer network of zombies under the control of an
attacker.
logic bomb - Answer - ✔Computer code that lies dormant until it is triggered by a
specific logical event.
signature file - Answer - ✔A database of viruses that is used to identify an infected file.
virus, trojan, worms - Answer - ✔3 types of malware
Backdoor - Answer - ✔what an attacker can use to give access to computer
program/service that circumvents normal security protections
continuous backup - Answer - ✔backup performed continually without any intervention
Keylogger - Answer - ✔a malicious program that records keystrokes.
service pack - Answer - ✔type of software update of cumulative package of all patches
& feature updates
Authentication - Answer - ✔The steps that ensure that the individual is who he or she
claims to be.
brute force attack - Answer - ✔A password attack in which every possible combination
of letters, numbers, and characters is used to create encrypted passwords that are
matched against those in a stolen password file.
dictionary attack - Answer - ✔A password attack that compares common dictionary
words against those in a stolen password file.
password - Answer - ✔A secret combination of letters, numbers, and/or characters that
only the user should have knowledge of.
shoulder surfing - Answer - ✔Viewing information that is entered by another person.
typo squatting - Answer - ✔Redirecting a user to a fictitious website based on a
misspelling of the URL. Also called URL hijacking.
vishing - Answer - ✔A phishing attack in which the attacker calls the victim on the
telephone.
whaling - Answer - ✔A phishing attack that targets wealthy individuals, who typically
would have larger sums of money in a bank account that an attacker could access.
authority - Answer - ✔Social engineering tool that an attack may use when
impersonating a CEO
change of address form - Answer - ✔identity thieves can complete a "______ __
________ ____" to divert you mail to another location.
Fair and Accurate Credit Transactions Act - Answer - ✔Law that contains rules
regarding consumer privacy
Facta - Answer - ✔Grants consumers the right to request one free credit report from
each firm every 12 months
social networking - Answer - ✔involes grouping individuals into clusters or groups based
on likes and interest
30 - Answer - ✔if a problem if founds on credit report, first send a letter to the agency.
they have ___ amount of daye to investigate and respond
, spear phishing - Answer - ✔A phishing attack that targets only specific users.
organizational charts - Answer - ✔documents identifying individuals in positions of
authority
Pretexting - Answer - ✔invented senerio used to gain trust to lure you into providing
information
dumpster diving - Answer - ✔Involves digging through trash receptacles to find
computer manuals, printouts, or password lists that have been thrown away
Zombie - Answer - ✔infected robot computer
worm - Answer - ✔designed to enter a computer
Denying services - Answer - ✔botnets that flood a web server of request to overwhelm it
so it cant respond to legitimate request
signature - Answer - ✔av software on a computer must have its ___ files regularly
updated by downloads from the internet
bot herder - Answer - ✔An attacker who controls a botnet.
Botnet - Answer - ✔A logical computer network of zombies under the control of an
attacker.
logic bomb - Answer - ✔Computer code that lies dormant until it is triggered by a
specific logical event.
signature file - Answer - ✔A database of viruses that is used to identify an infected file.
virus, trojan, worms - Answer - ✔3 types of malware
Backdoor - Answer - ✔what an attacker can use to give access to computer
program/service that circumvents normal security protections
continuous backup - Answer - ✔backup performed continually without any intervention
Keylogger - Answer - ✔a malicious program that records keystrokes.
service pack - Answer - ✔type of software update of cumulative package of all patches
& feature updates
