Year 9 - Cybersecurity

Which UK law gives you the right to access the data an organisation stores on you?

• The Freedom of Information Act

• The Computer Misuse Act

• The Data Protection Act

• The Copyright, Designs, and Patents Act

When data has been processed and is meaningful, which of these has it become?

• Information

• Processed data

• Identifiable data

• Profiled

What is the purpose of the Data Protection Act?

• To protect an organisation from hackers

• To require organisations that store data on people to use it responsibility and keep it safe

• To act as a deterrent to cybercriminals who try to steal data on people

• To prevent cybercriminals from spreading a virus

What is social engineering?

• Methods used by cybercriminals to deceive individuals into handing over information

• Hacking a system by taking control of someone else's computer

• Using the computer of someone who has accidently left themselves logged on

• A malicious attempt to disrupt a server or network by flooding it with internet traffic

You receive an email from an unknown sender asking for money. The sender wants you to respond to the email. There are no hyperlinks in the email, but it includes unusual use of English and there are a number of spelling mistakes. What type of social engineering attempt is this?

• Shouldering

• Phishing

• Spam

• Blagging

Which of the following describes a name generator attack?

• Software used to randomly create accounts that post to social media

• Attackers create an online quiz to produce a name; the answers to the quiz find out key pieces of information that can help them to answer the security questions protecting people's accounts

• An attack that makes multiple attempts to guess a username and password

• A form of identity theft conducted online

‘Gaining unauthorised access to or control of a computer system’ is a definition of which type of cybercrime?

• Hacking

• Viruses

• Social engineering

• Phishing

What is the term for people who are paid to legally hack into computer systems with the sole purpose of helping a company identify weaknesses in their system?

• Ethical hackers

• Legal hackers

• Penetration testers (pen testers)

• System administrators

What is the purpose of a DDoS attack?

• To use multiple computers to flood a network or server with internet traffic in order to disrupt service

• To use a single computer to flood a network or server with internet traffic in order to disrupt service

• To use multiple computers to infiltrate a network in order to steal data or to plant a virus

• To use a single computer to infiltrate a network in order to steal data or to plant a virus

Which of the following passwords would be the best defence against a brute force attack?

• peter1£@!

• Petertherabbit

• P3tertherabb1t

• P$tertherabb1t