Cybersecurity Essential Training Final Activity

Front

Under RA 10173 (Data Privacy Act of 2012), what is the primary responsibility of organizations handling personal data?

Back

To ensure the confidentiality, integrity, and availability of personal data

Answer explanation

RA 10173 mandates organizations to protect personal data by maintaining its confidentiality, ensuring its integrity, and making it available only to authorized parties, aligning with privacy principles.

Front

Why is cybersecurity critical for both individuals and organizations?

Back

It reduces the risk of financial loss and reputational damage from cyber threats.

Answer explanation

1. Cybersecurity protects against data breaches and attacks that can lead to significant financial losses and harm an organization’s or individual’s reputation, making it a priority for all.

Front

Which of these is a key indicator of a phishing email? A personalized greeting with your full name, An urgent request to click a link or provide sensitive information, A professional company logo in the email signature, A long, detailed explanation of a product offer

Back

An urgent request to click a link or provide sensitive information

Answer explanation

1. Phishing emails often use urgency or fear tactics to trick users into acting quickly without verifying legitimacy, a common technique to steal credentials or infect devices.

Front

Under RA 10173, personal information controllers must appoint a __________ to ensure compliance with data protection regulations.

Back

Data Protection Officer

Answer explanation

5. The Data Privacy Act requires a Data Protection Officer (DPO) to oversee compliance, manage data risks, and ensure adherence to privacy laws.

Front

A type of malware that encrypts files and demands payment for decryption is called _____.

Back

Ransomware

Answer explanation

5. Ransomware locks access to data and extorts victims for payment, making it a prevalent and disruptive cyber threat.

Front

The act of impersonating someone online to steal their personal information is known as __________ theft

Back

Identity

Answer explanation

Identity theft involves using stolen personal data (e.g., name, passwords) to commit fraud or unauthorized actions, a growing concern in cybersecurity.

Front

What is the primary goal of the NIST Cybersecurity Framework?

Back

To provide a flexible guide for managing cybersecurity risks

Answer explanation

The NIST Framework offers a voluntary, adaptable structure to help organizations identify, protect, detect, respond to, and recover from cyber risks.

Front

According to CIS Controls, which of the following is a foundational security practice? Allowing unrestricted software installation, Maintaining an inventory of authorized hardware devices, Disabling multi-factor authentication for convenience, Ignoring software patches to avoid downtime

Back

Maintaining an inventory of authorized hardware devices

Answer explanation

8. CIS Control 1 emphasizes knowing what devices are on your network to prevent unauthorized access, a basic yet critical step.

Front

Under DICT Circular No. 003 (2024), what must government agencies prioritize to strengthen cybersecurity?

Back

Conducting regular cybersecurity awareness training

Answer explanation

8. DICT Circular No. 003 emphasizes training to enhance personnel’s ability to recognize and mitigate cyber threats, a key preventive measure.

Front

What is the role of a Computer Emergency Response Team (CERT)?

Back

To respond to and mitigate cybersecurity incidents

Answer explanation

8. CERTs are specialized teams tasked with handling cyber incidents, coordinating responses, and reducing damage from attacks.