Software automatically tries many passwords or PINs until one works
Which password would a brute-force attack most quickly find?
A short word found in a dictionary
What is the effect of a denial of service attack on a website?
Genuine users cannot reach it because the server is overwhelmed
A denial of service attack uses up resources so that genuine users cannot be served. Which resources does it use up?
Bandwidth, processing time and memory
Why can data interception on a network go unnoticed by the sender and receiver?
The attacker copies the data without changing it
A shopper's card details are copied by an attacker while the data travels across a cafe's network. Which form of attack is this?
Data interception
An attacker steals a company laptop so they can read the customer records stored on it. Which form of attack is this?
Data theft
How does an SQL injection attack work?
SQL code typed into a form becomes part of the website's database command
What can an attacker achieve by using SQL injection on a website's login form?
Logging in without knowing the correct password
An attacker types ' OR '1'='1 into a password box and is logged in. Why does this work?
It makes the login condition true for every record
An attacker uses brute-force software to find a user's password. What is the attacker most likely to do next?
Read, change or delete anything the account can reach
A website finds that records in its customer database have been changed and some have been deleted. Which form of attack is most likely to have caused this?
SQL injection
A group of protesters floods a council website with traffic so that nobody is able to use it. Why do they carry out this attack?
To disrupt the service and damage the organisation's reputation
A shopper's card details and passwords are copied while they use an unsecured public Wi-Fi network. What is the attacker most likely to do with them?
Use them to commit fraud or identity theft
Software tries thousands of different passwords on a single account in less than a minute. Which form of attack is this?
Brute-force attack
Which term describes the flooding of a server with so many requests that genuine users are unable to use it?
Denial of service attack
What is meant by data interception?
Capturing data as it is sent across a network so that an attacker can read it
Which of these is used by many websites to search and update the data held in a database?
Structured Query Language
What is meant by data theft?
Taking a device or storage that holds data, such as a USB drive
We use cookies to enhance your experience. You can manage your preferences or learn more in our Cookie Policy.