Question: Activity trackers are an example of what?
Answer: Quantified Self devices

Question: What could wifi, bluetooth, and cellphone network on devices be used as?
Answer: attack vectors

Question: What could be remotely activated after a sucessful breach?
Answer: sensors

Question: What does ACL stand for?
Answer: access control lists

Question: ACLs and capability based security are two security models capable of what?
Answer: enforcing privilege separation

Question: A host computer tricked into indirectly allowing access to restricted files is known as what?
Answer: the confused deputy problem

Question: What must designers of systems that are ACL based do?
Answer: take responsibility to ensure that they do not introduce flaws

Question: The confused deputy problem and the problem of not guaranteeing only one person has access are resolved by what?
Answer: capabilities

Question: In what year did over a hundred intrusions made into the Rome Laboraroty?
Answer: 1994

Question: How were hackers able to obtain unrestricted access to Rome's networking systems?
Answer: Using trojan horses

Question: How were hackers able to penetrate connected networks?
Answer: by posing as a trusted Rome center user

Question: What is the Rome Laboratory?
Answer: the US Air Force's main command and research facility

Question: Who does the Goddard Space Flight Center belong to?
Answer: National Aeronautics and Space Administration

Question: When did The Impact Team successfully breach Ashley Madison?
Answer: July of 2015

Question: What is the name of the parent company that created Ashley Madison?
Answer: Avid Life Media

Question: When did the Avid Life Media CEO resign?
Answer: After the second data dump

Question: What was in the first data dump?
Answer: emails from the company's CEO

Question: What website, in addition to Ashley Madison, was Avid Media instructed to take offline?
Answer: Established Men

Question: According to goverment officials, what has the failure of the private sector to solve efficiently the cybersecurity problem created?
Answer: a crucial need for regulation

Question: Where was the RSA Security Conference held?
Answer: San Francisco

Question: Who believes that government intervention would affect innovation?
Answer: executives from the private sector

Question: Who said "industry only responds when you threaten regulation"?
Answer: R. Clarke

Question: What is a virtual space free of any government intervention?
Answer: cyberspace

Question: When did Public Safety Canada unveil Canada's Cyber Security Strategy?
Answer: October 3, 2010

Question: What outlines the ongoing implementation of the Cyber Security Strategy?
Answer: The Action Plan 2010–2015 for Canada's Cyber Security Strategy

Question: What outlines the responsibilities and provides a plan for coordination during a cyber incident?
Answer: The Cyber Incident Management Framework for Canada

Question: What is a potential attack vector for utilities such as the power grid?
Answer: The Internet

Question: What demonstrated equipment controlled by computers not connected to the internet can also be vulnerable?
Answer: the Stuxnet worm

Question: When did the Computer Emergency Readiness Team investigate 79 hacking incidents at energy companies?
Answer: 2014

Question: What department does the Computer Emergency Readiness Team belong to?
Answer: the Department of Homeland Security

Question: How did the Stuxnet worm infect industrial equipment?
Answer: via removable media

Question: Firewalls and exit procedures are considered what?
Answer: "preventive" measures

Question: What is defined as a way of filtering network data between a host or network and another network?
Answer: A firewall

Question: What does a physical firewall consist of?
Answer: a separate machine filtering network traffic

Question: What type of machines normall have a firewall?
Answer: permanently connected to the Internet

Question: What compromises mainly preventative measures?
Answer: computer security

Question: What has caused serious financial damage?
Answer: security breaches

Question: Data made public who is available to estimate the cost of an incident?
Answer: the organizations involved

Question: What is the amount of losses estimated from worms and viruses in 2003?
Answer: $13 billion

Question: Who produces estimates of worldwide losses attributable to security breaches?
Answer: Several computer security consulting firms

Question: What is the underlying methodology of finding worldwide estimates for losses fur to security breaches?
Answer: basically anecdotal

Question: Microchips vulnerabilities are introduced when?
Answer: during the manufacturing process

Question: What offers an alternative to soft-ware only computer security?
Answer: hardware-based or assisted computer security

Question: What can hardware be a source of?
Answer: insecurity

Question: What is required in order for hardware to be compromised?
Answer: physical access (or sophisticated backdoor access)

Question: What does CCIRC stand for?
Answer: Canadian Cyber Incident Response Centre

Question: Who is resposible for mitigating and responding to threats to Canada's critical infrastructure?
Answer: CCIRC

Question: Where does the CCIRC post regular cyber security bulletins?
Answer: on the Public Safety Canada website

Question: What functions as a counterpart document to the National Strategy and Action Plan for Critical Infrastructure?
Answer: Canada's Cyber Security Strategy

Question: Who said "Connectedness begets vulnerability?"
Answer: Jay Cross

Question: What organization does Jay Cross belong to?
Answer: the Internet Time Group

Question: What is the advantage of more critical infrastructure being controlled via computer programs?
Answer: increasing efficiency

Question: What is the disadvantage of more critical infrastructure being controlled via computer programs?
Answer: exposes new vulnerabilities

Question: When did Public Safety Canada partner with Stop.Think. Connect?
Answer: September 27, 2010

Question: When was the Cyber Security Cooperation Program launched by the Government of Canada?
Answer: February 4, 2014

Question: Who routinely updates the GetCyberSafe portal for Canadian citizens?
Answer: Public Safety Canada

Question: What month is Cyber Security Awareness Month?
Answer: October

Question: How much does the Cyber Security Cooperation Program cost?
Answer: $1.5 million

Question: Installing keyloggers and making operating system modifications are examples of ways unauthorized users for what?
Answer: compromise security

Question: Booting a tool or another operating system from a CD Rom can bypass what?
Answer: standard security measures

Question: Disk encryption and Trusted Platform Module are designed to prevent what?
Answer: attacks

Question: An unauthorized user with physical access to a computer can likely do what?
Answer: directly download data from it

Question: UI redress attack or User Interface redress attack is also known as what?
Answer: Clickjacking

Question: What is a malicious technique in which an attacker tricks the user into clicking on a button or link?
Answer: Clickjacking

Question: Where are the clicks meant for the top level page routed?
Answer: some other irrelevant page

Question: Where would a password typed on a seemingly authetic webpage be directed?
Answer: into an invisible frame controlled by the attacker

Question: How istricking the user accomplished in clickjacking?
Answer: using multiple transparent or opaque layers

Question: How many computers were connected to the internet in 1988?
Answer: 60,000

Question: When was the first computer worm released?
Answer: November 2, 1988

Question: Who was the first computer worm traced back to?
Answer: Robert Tappan Morris, Jr.

Question: What is a malicious code that demands processor time and spreads itself to other computers?
Answer: computer worm