5
a) A vulnerability is a flaw in a program that permits a specific attack or set of attacks against this program to succeed
b) Users can eliminate vulnerabilities by installing patches. After patch installation, the program is safe from attacks based on that particular vulnerability
c) Zero‐day attack
6
a) A virus attaches itself to another program, but worms are stand‐alone programs
b) Propagation vector is a computer to computer transmission method
c) Most virus and worms spread involve human gullibility, U.S. forces plug in an infected USB
RAM sticks into their USB ports and spread the infection throughout their network
d) Worms are able to jump by themselves from an infected computer to another target computer that has a particular vulnerability.
e) It is dangerous because directly propagating worms can spread. The slammer worm infected
90% of all vulnerable computers attached to the internet within 10 minutes.
11
a) A hacker can use exploit to take over the host by sending exploit packets. The act of breaking into a computer is called an exploit
b) The attacker can manually look through files or delete files, and transferring them outside the network.
12
a)
b)
c)
d)
e)
f)

the purpose if a DoS iis to make a computer entire network unavailable to its legitimate users. botnet
Bot master the bots are flexible because of their ability to divide so that the bot master can give them multiple different tasks to complete at the same the time.
g) first thing is that, the attacker floods the victim's computer with attack packets. then the victim's computer becomes so busy processing the flood of attack packets that it cannot process legitimate packets.
14
A. most hackers today are criminal hackers
B. this type of hackers are very dangerous because they have the ability and have access to a lot of things. and they also steal credit card numbers, and steal secrets from different companies
C. these hackers can steal trade secrets to sell them to competitors, they encrypt hard drives then demand payment for a key to decrypt them again.

15
A. in the U.S. and most countries, it is not illegal to write malware
B. it is illegal to release malware to do damage or to sell malware that will be used that way
16
A. employees may attack if they are unhappy or they simply want to steal
B. the most dangerous employees are IT security staff members
C. because they have a lot more access than other employees, they also have much more knowledge of how to avoid detection, have much better knowledge of corporate systems, and are trusted to be defenders.
D. ex‐employees may attack because of revenge, another reason is stealing trade secrets that the employee worked on.
E. when an employee leaves the firm, it is important to terminate all access to internal resources after they leave.
F. contractors are more dangerous because they are given inside access
17
A. cyberterror attacks are by terrorists and cyber war attacks are by national governments
B. Cyberwar and Cyberterror attacks are dangerous because the can produce unprecedented damages in the hundreds of billions of dollars
18
A. a cypher is an encryption method
B. confidentiality mens that even if someone intercepts a message, they will not be able to read it. C. in a symmetric key encryption two sides share a single key
D. 100 bits
19
A. electronic signature allows the receiver to detect a message added to the dialogue by an impostor, and also the receiver will be able to detect if the packet is altered by an attacker while the packet is in transit.
B. message by message confidentiality, message by message authentication and message integrity 20
A. a private network is a network that uses a private IP address, a virtual private network is a method employing encryption to provide secure access to a remote computer over the internet 21
A. authentication is the process of determining whether someone or something is who or what it is declared to be.

22
A. passwords are widely used because for users passwords are familiar and relatively easy to use
B. types of passwords that are susceptible to dictionary attacks are passwords that are easy to guess 24
A. to authenticate yourself with an access card, you must enter a PIN number
B. some examples of biometrics are fingerprints or iris scan
C. fingerprint recognition can be acceptable because it is unique to the user and that only he or she can have it
D. even though fingerprint recognition is good, there is a way around it and that in some case some people have a very similar fingerprint, but an iris scan is a lot more unique than a fingerprint E. face recognition is controversial because it is difficult to differentiate some faces from others
25
A.
B.
C.
D.
E.

the supplicant verifies whatever the user inputs the verifier tests the response message by decrypting it yes the verifier decrypts the true party

27
A. the firewall copies information about each discarded packet into a firewall log file.
B. no even if the firewall detects that it is an attack packet, it will not drop it but will not allow it to pass
C. it is important to read firewall logs daily because you are able to see what packets came through and you are able to see the attack packets
D. ingress is filtering packets arriving at a network, and egress is filtering packets from the network to the outside.