________ is the process of assessing the identity of each individual claiming to have permission to use a resource.

Consider the scenario where a user enters a search term, and the attacker tricks the valid website into feeding a malicious script to another browser to execute.  Example: Pop-up window, “Thank you, Abby, for your submission!”  This describes _____________________.

Open networks can be legally accessed by anyone and are frequently posted as such.

_____________  fraud attempt that targets a specific organization in order to seek unauthorized access to confidential data.

The NIST Cyber Security Framework is voluntary guidance, based on existing standards, guidelines, and practices for organizations to better manage and reduce cybersecurity risk. In addition to helping organizations manage and reduce risks, it was designed to foster risk and cybersecurity management communications amongst both internal and external organizational stakeholders.

________ are an additional layer of compromised hosts that are used to manage large groups of bots.

In the military, departments do not have the ability to alter access control rules set by higher authorities in ________.

Sending packets with false IP source addresses is called ________.

False alarms in an IDS are known as ________.

________ attacks take advantage of flawed human judgment by convincing the victim to take actions that are counter to security policies. (Choose the best answer.)