Cybersecurity Quiz 1

Which statement was FALSE about Cybersecurity?

• Cybersecurity tools helps to keep your personal data, like passwords, financial information, and sensitive documents, safe from unauthorized access and potential harm.

• Cybersecurity refers to the practice of protecting computer systems, networks, and data from unauthorized access, damage, theft, and other cyber threats.

• Cybersecurity is like imagine your online life as a castle, and cybersecurity is the system of walls, gates, and guards that keep the bad guys (like hackers and cybercriminals) out and protect your valuable information.

• Antivirus software alone is enough to protect your computer from all types of cyber threats, and using public Wi-Fi networks is always safe as long as you have a strong password for your device.

What is Information Security?

• Protecting sensitive and valuable information by employing encryption, access controls, and secure data storage and transmission methods.

• The protection of available information or information resources from unauthorized access, attack, theft, or data damage.

• Responsible individuals and organizations must secure confidential data.

• Data in all forms must be protected.

  This minimizes business risks and other consequences of losing crucial data.

Information Security Goals?

• Prevention

• Detection

• Recovery

• Security

What is RISK?

• A concept that indicates exposure to the chance of damage or loss and signifies the likelihood of a hazard or dangerous threat.

• IT risk is associated with system, power, network, and physical losses.

  Can also affect people, practices, and processes.

• Any condition that leaves a device open to harm.

• Any event or action that could potentially cause damage to an asset.

What is Vulnerabilities?

• Any condition that leaves a device open to harm.

• Improperly configured or installed hardware or software.

• Bugs in software or OSs.

• A technique used to exploit a vulnerability in an application or physical computer system without the authorization to do so.

What is Threats?

• Any event or action that could potentially cause damage to an asset.

• Misusing software or communication protocols.

• Design flaws in software or OSs.

• Safeguards and countermeasures, physical or logical.

What is Attacks?

• A technique used to exploit a vulnerability in an application or physical computer system without the authorization to do so.

• Untested software or firmware patches.

• Discovering attempts to access unauthorized data, or that information has been lost

• Countermeasures that you need to put in place to avoid, mitigate, or counteract security risks due to threats and attacks.

What is Control?

• Countermeasures that you need to put in place to avoid, mitigate, or counteract security risks due to threats and attacks.

• Solutions and activities for meeting information security objectives.

• Safeguards and countermeasures, physical or logical.

• Installing control mechanisms to prevent problems in a system.

Types of Controls?

• Preventive Controls: Help to prevent a threat or attack from exposing a vulnerability.

• Detective Controls: Help to discover if a threat or vulnerability has entered a computer system.

• Corrective Controls: Help to mitigate the consequences of a threat or attack from adversely affecting a computer system.

• Predictive Controls: Help to mitigate the consequences of a threat or attack from adversely affecting a computer system.

What is The Security Management Process?

• A process of managing physical security
• A process that identifies security risks.

• A process that develops strategies to manage the risks and implements the strategies to reduce the risks.

• A process that monitor any security issues that arise after security controls are implemented.