BSBSXCS420- 2023 s2

Which of these is a type of malicious software (malware)?

• Phishing

• Ransomware

• Multi-Factor Authentication

• Backups

Answer explanation

Ransomware is a type of malicious software designed to block access to a computer system until a sum of money is paid.

Which of the following is a common method used by attackers to steal sensitive information?

• Phishing

• Ransomware

• Software updates

• Multi-Factor Authentication

Answer explanation

Phishing is a cyber attack that uses disguised email as a weapon to trick the email recipient into believing that the message is something they want or need.

Why are operating system and software updates essential in cybersecurity?

• They add new features to your programs.

• They allow the software to run faster.

• They can fix security vulnerabilities in the software.

• They change the look and feel of the software.

Answer explanation

They can fix security vulnerabilities in the software. Explanation: OS and software updates often include patches to fix security vulnerabilities that have been discovered.

What is the main purpose of having backups in cybersecurity?

• To prevent unauthorized access

• To recover data in case of data loss or a security incident

• To update software

• To protect against malware

Answer explanation

Backups are crucial to restore original data in the event of data loss, data corruption, or a security incident.

Which of these is an added layer of security, apart from just username and password?

• Phishing

• Ransomware

• Multi-Factor Authentication

• Malware

Answer explanation

Multi-Factor Authentication provides an additional layer of security that requires users to prove their identity in multiple ways before gaining access to a computer system or application.

What is the primary purpose of access control in cybersecurity?

• To perform software updates

• To send phishing emails

• To control who can access information on a network

• To create backups of information

Answer explanation

Access control is a security technique that can be used to regulate who or what can view or use resources in a computing environment.

Which of the following needs to be protected to prevent identity theft?

• Phishing emails

• Malware

• Sensitive data

• Ransomware

Answer explanation

Sensitive data like personal identification information, financial information, etc., need to be protected to prevent identity theft.

Why is training important in cybersecurity?

• To teach people how to use new features in software updates

• To teach people how to create backups

• To educate people on recognizing and preventing security threats

• To teach people how to write phishing emails

Answer explanation

Training is important to educate people about various cyber threats and the best practices to avoid falling victim to them.