Nine Ways to Stay Safe Online- CISA Lesson

Multiple Choice

What are the benefits of implementing cybersecurity best practices?

• Protecting intellectual property

• Increasing operational costs

• Reducing employee productivity

• Limiting data access

Multiple Select

Check off all the ways you can make a stronger password:

• Make it longer than 8 characters

• Use mixed sets of characters

• Keep it easy to spell

• Use only capitals or lowercase

Multiple Choice

Why is it important to update your software and applications regularly?

• Updates use up unnecessary device storage.

• Updates are only for changing the interface.

• Updates fix security vulnerabilities and improve functionality.

• Updates are a way for companies to charge you more money.

Reorder

Abigail and Zoe are setting up a website for their new business venture and are discussing the MOST effective method to maintain a high level of password security over time for their admin accounts.

Rank the options below from BEST --> WORST

• Employing a reputable password manager to generate and store complex passwords

• Choosing passwords that are at least 10 characters long with mixed characters

• Regularly changing the password to something they can easily recall

• Utilizing the same password across all accounts for consistency

1

2

3

4

• 1
• 2
• 3
• 4

Multiple Choice

What are the benefits of using a password manager?

• Stores your passwords

• Alerts you of duplicate passwords

• Generates strong passwords

• Fills in your login credentials

Multiple Choice

What is the key advantage of multi-factor authentication over single-factor authentication?

• It is faster

• It uses only one type of security measure

• It provides higher security by using multiple verification methods

• It is less complex

Multiple Choice

Which MFA method provides the best protection against phishing?

• Security key

• Authenticator app with number matching

• Biometrics

• Text or email code

Multiple Choice

What are some signs that a message may be phishing?

• Urgent tone

• Sender email mismatch

• Unexpected communications

• All of the above

Multiple Choice

What should you do if you receive an email that you suspect is phishing?

• Reply to the email asking if it is legitimate.

• Click on any links to verify their destination.

• Report the email to your IT department or use the report feature in your email client.

• Forward the email to your contacts to see if they have received a similar one.

Multiple Choice

What is logging and monitoring?

• Logging is the process of recording activity on your business systems.

• Monitoring adds a layer of oversight by reviewing logs.

• Together, they create a clear picture of normal behavior.

• You can quickly detect anything suspicious.

Multiple Choice

A security learn implemented a SIEM as part for its security-monitoring program there is a requirement to integrate a number of sources Into the SIEM to provide better context relative to the events being processed. Which of the following BEST describes the result the security learn hopes to accomplish by adding these sources?

• Data enrichment

• Continuous integration

• Machine learning

• Workflow orchestration

Multiple Choice

____________ is an unusual activity in a group of otherwise normal activities.

• Anomaly

• Iteration

• Parameter

• Precision

Multiple Choice

Why is it important for Aria to have a backup of her project data in the context of cybersecurity?

• To speed up her computer.

• To have additional copies of the project for sharing with her team.

• To prevent project data loss in case of a cyber attack.

• To use more storage space on her computer.

Multiple Choice

What are the best practices for backing up data?

• 3 copies of important files

• 2 different types of storage media

• 1 copy stored off-site

• All of the above

Multiple Choice

What is encryption?

• A person who tricks you into giving your password

• converting information or data into a code to prevent unauthorized access.

• To upload your personal data to the cloud

• When there is a security breach in your data

Multiple Choice

What should you encrypt?

• All devices and hard drives

• Only laptops

• Only removable media

• Only sensitive data

Multiple Choice

As a member of a Computer Security Incident Response Team (CSIRT), you are involved in collecting data for incident response activities. When the CSIRT is dealing with an advanced persistent threat (APT) targeting your organization, which of the following methods is likely to be particularly useful in gathering information about the threat actor?

• Analyzing network traffic for signs of command-and-control activity

• Implementing password changes

• Increasing cloud storage

• Disabling firewall rules