2 cissp ® Official Study Guide Eighth Edition

A.
Disclosing embarrassing personal information
B.
Launching a virus on an organization’s system
C.
Sending inappropriate email with a spoofed origination address of the victim 
organization
D.
Using automated tools to scan the organization’s systems for vulnerable ports

---

Review Questions 
867
7.
What are the primary reasons attackers engage in thrill attacks? (Choose all that apply.)
A.
Bragging rights
B.
Money from the sale of stolen documents
C.
Pride of conquering a secure system
D.
Retaliation against a person or organization
8.
What is the most important rule to follow when collecting evidence?
A.
Do not turn off a computer until you photograph the screen.
B.
List all people present while collecting evidence.
C.
Never modify evidence during the collection process.
D.
Transfer all equipment to a secure storage location.
9.
What would be a valid argument for not immediately removing power from a machine 
when an incident is discovered?
A.
All of the damage has been done. Turning the machine off would not stop additional 
damage.
B.
There is no other system that can replace this one if it is turned off.
C.
Too many users are logged in and using the system.
D.
Valuable evidence in memory will be lost.
10.
Hacktivists are motivated by which of the following factors? (Choose all that apply.)
A.
Financial gain
B.
Thrill
C.
Skill
D.
Political beliefs
11.
Which one of the following investigation types has the highest standard of evidence?