Phishing and Malware Prevention Flashcard

Front

What is the primary purpose of email filtering in preventing phishing attacks?

Back

Blocking malicious emails.

Front

Which control is most effective for preventing malware infections?

Back

Patch management

Front

What is the first step in incident response for a ransomware attack?

Back

Disconnect affected systems.

Front

Which of the following is a control to prevent DDoS attacks? Parameterized queries, Rate limiting, Endpoint detection, VPN

Back

Rate limiting

Front

What is a "least privilege policy"?

Back

Providing the minimal access necessary for a role.

Front

Identify one indicator of an insider threat.

Back

Unusual data access patterns, such as downloading large amounts of data without a clear need.

Front

Which control helps protect sensitive data in the event of a breach? Options: MFA, Antivirus software, Email filtering, Rate limiting.

Back

MFA.

Front

What should an organization do immediately after identifying a data breach?

Back

Contain the breach by limiting access to affected systems and securing data.

Front

Which practice helps mitigate password attacks?

Back

Using a password manager.

Front

What is credential stuffing?

Back

Credential stuffing is the use of stolen login credentials from one site to access accounts on another site.