CJIS SECURITY TEST FULL SOLUTION STUDY
GUIDE
◉ Social Engineering.
Answer: Tricking individuals into revealing sensitive information.
◉ Social Mining.
Answer: Gathering organizational information for future attacks.
◉ Phishing.
Answer: Emails designed to deceive users into sharing data.
◉ Spear Phishing.
Answer: Targeted phishing aimed at specific individuals or groups.
◉ Social Media Exploitation.
Answer: Using social media info for targeted phishing attacks.
◉ Pretexting.
Answer: Creating a false story to obtain private information.
,◉ Impersonation.
Answer: Pretending to be someone else to gain access.
◉ Fake IT Support Calls.
Answer: Impersonating IT staff to extract sensitive data.
◉ Baiting.
Answer: Luring users with false promises to compromise security.
◉ Scareware.
Answer: False alarms convincing users to install harmful software.
◉ Quid Pro Quo.
Answer: Exchanging sensitive info for promised services.
◉ Tailgating.
Answer: Unauthorized entry by following an authorized individual.
◉ Thread-jacking.
Answer: Inserting into email conversations to gain trust.
◉ Shoulder Surfing.
, Answer: Observing someone's screen to steal information.
◉ Vulnerability.
Answer: Weaknesses in security that can be exploited.
◉ Examples of Vulnerabilities.
Answer: Include physical, natural, hardware, and software
weaknesses.
◉ Minimizing Vulnerability.
Answer: Steps to protect against malware and unauthorized access.
◉ Antivirus Software.
Answer: Essential for protecting against malicious code.
◉ Monitoring User Activity.
Answer: Ensures compliance and prevents improper use.
◉ Reporting Unusual Activity.
Answer: Encouraged to identify potential insider threats.
◉ Security Alerts.
GUIDE
◉ Social Engineering.
Answer: Tricking individuals into revealing sensitive information.
◉ Social Mining.
Answer: Gathering organizational information for future attacks.
◉ Phishing.
Answer: Emails designed to deceive users into sharing data.
◉ Spear Phishing.
Answer: Targeted phishing aimed at specific individuals or groups.
◉ Social Media Exploitation.
Answer: Using social media info for targeted phishing attacks.
◉ Pretexting.
Answer: Creating a false story to obtain private information.
,◉ Impersonation.
Answer: Pretending to be someone else to gain access.
◉ Fake IT Support Calls.
Answer: Impersonating IT staff to extract sensitive data.
◉ Baiting.
Answer: Luring users with false promises to compromise security.
◉ Scareware.
Answer: False alarms convincing users to install harmful software.
◉ Quid Pro Quo.
Answer: Exchanging sensitive info for promised services.
◉ Tailgating.
Answer: Unauthorized entry by following an authorized individual.
◉ Thread-jacking.
Answer: Inserting into email conversations to gain trust.
◉ Shoulder Surfing.
, Answer: Observing someone's screen to steal information.
◉ Vulnerability.
Answer: Weaknesses in security that can be exploited.
◉ Examples of Vulnerabilities.
Answer: Include physical, natural, hardware, and software
weaknesses.
◉ Minimizing Vulnerability.
Answer: Steps to protect against malware and unauthorized access.
◉ Antivirus Software.
Answer: Essential for protecting against malicious code.
◉ Monitoring User Activity.
Answer: Ensures compliance and prevents improper use.
◉ Reporting Unusual Activity.
Answer: Encouraged to identify potential insider threats.
◉ Security Alerts.
