Cyber Skills

What are some examples of soft skills that are important for cybersecurity professionals to possess? (Choose Two)

• Communication

• Adaptability

• Technical Aptitude

• Networking

Answer explanation

Soft skills, also known as interpersonal or people skills, are a set of personal attributes and qualities that enable individuals to interact effectively with others.

These skills are often related to one's emotional intelligence, communication abilities, and interpersonal relationships.

Visit this message decryption site: https://cryptii.com/pipes/caesar-cipher

Paste the message below into the right-hand site and change the 'Caesar cipher' shift value until the plain text reveals the secret message.

Lhknabnldarch bcdmnwcb jan pdjamrjwb rw yarejlh

How much did you need to shift the message cipher to decode the message?

• 4

• 17

• 9

Answer explanation

Within a Caesar Cipher, we are simply shifting each letter a certain number of places down the alphabet.

This is a very simple form of encryption known as substitution.

How do cybersecurity professionals work with developers to ensure that applications are designed and implemented with security in mind?

• Early Involvement

• Testing only at end of project

• Provide security policies to Dev Team

Answer explanation

Early involvement of cybersecurity professionals in the software development process is critical to identify security requirements, identify threats and save costs by fixing vulnerabilities early in development.

I

Early involvement helps in establishing a security-conscious culture within the development team.

Which of these skills do you think cybersecurity people need?

• Business acumen

• Passion

• Curiousity

• All these skills

Answer explanation

Business Acumen: Cybersecurity professionals to make informed decisions about resource allocation and risk management. They can prioritize security initiatives based on the potential impact on business operations and assets.

Passion: Passion drives individuals to stay current with evolving cybersecurity threats and technologies.

Curiosity: Cybersecurity incidents often require thorough investigation, and a curious mindset can drive professionals to dig deeper into the root causes of incidents and vulnerabilities.

Should cybersecurity professionals be allowed to 'hack back' against attackers, or does this violate ethical and legal principles?

• Yes - Hacking back can potentially disrupt and disable attackers, making it more difficult for them to continue their attacks.

• No - Hacking back may escalate the conflict with attackers, leading to further attacks or retaliation.

Answer explanation

The prevailing view within the community and among legal experts is that "hack back" activities are generally not an appropriate or effective approach.

Such activity could lead to Vigilantism, Mistaken Identity and have a Lack of Oversight.

Instead, organizations and cybersecurity professionals are encouraged to focus on proactive defense, collaboration, and adherence to legal and ethical standards.

However, some state services do pursue this form of defence.

Harmful programs used to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems are commonly referred to as:

^*

• Phishing

• Software

• Malware

• Adware

Answer explanation

Malware is the broad term that encompasses various types of malicious software.

What is typically meant by phishing?

• 
  scams through phone calls

• 
  scams through emails

• scams through text messages

Answer explanation

Phishing is a type of cyber attack in which attackers use deceptive techniques to trick individuals into revealing sensitive information, such as login credentials, personal details, or financial information.

Is this site authentic?

• Yes

• No

Select the Phishing Schemes that apply to the following email:
From:  [e-mail]
Subject:  Account Status
Attention US Bank Customer,
Due to a recent security check on your account, we require you to confirm your details.  Failure to do so within 24 hours will lead to account suspension.  Sorry for the inconveenince.
Click here to confirm your account

Regards,
US Bank Online Customer Service
This email has been sent by US Bank.

• Generic greeting & Link to email

• Need to verify account info

• Sense of urgency & Spelling errors

• ALL of the previous choices are in the email.

Phishing is

• 
  using a fishing pole to catch fish.

• 
  pretending to be someone you're not.

• 
  luring someone into giving out private information.

• 
  being at high risk of attack or harm