ITPEC FE Morning October 2022 Question 40
Which of the following is an appropriate term associated with the fraudulent action of impersonating an authorized person?
Explanation
Spoofing — pretending to be another user, host or sender in order to be trusted as them.
Spoofing fakes identity: using someone's stolen ID and password, forging the source IP address of a packet, or forging the sender of an email. The defence is authentication that the attacker cannot reproduce, such as multi-factor authentication or digital signatures.
Answer (c)
Why not others:
- •(a) Destruction — damaging or deleting data or equipment; it harms availability and fakes no identity
- •(b) Falsification — altering data content without authorisation (tampering); it fakes the data, not who you are
- •(d) Tapping — eavesdropping on a communication line to read the data, a breach of confidentiality
Key rule: Name a threat by what it fakes or harms: identity → spoofing, data content → falsification, secrecy → tapping, existence → destruction.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.