IAaS Quiz 1 - Prelim

A medium-sized company has frequent malware infections. They bring in a professional who evaluates the network, identifies weak spots, and creates a plan to improve protection without redesigning the entire system.
Which role best fits this scenario?

• Security Architect

• CISO

• Security Consultant

• Ethical Hacker

A university discovers that hackers tried to access student grades by sending fake login pages to professors. To prevent this, the IT team adds two-factor authentication and educates staff about phishing.
What practice does this represent?

• Data Analytics

• Cybersecurity

• Deep Learning

• Social Engineering

A financial institution hires a specialist to try to bypass logins, exploit weak passwords, and break into their online banking system—all legally and with permission. Afterward, they submit a report of vulnerabilities and solutions.
Which role is at work here?

• Security Architect

• Ethical Hacker (White Hat Hacker)

• Chief Information Security Officer (CISO)

• Security Consultant

A multinational company is expanding its cloud infrastructure. Before the launch, a professional is tasked to design multiple layers of defense—firewalls, encryption, and access controls—to prevent hackers from breaking into the servers.
Which cybersecurity role does this describe?

• Security Consultant

• Security Architect

• Chief Information Security Officer (CISO)

• Ethical Hacker

A hacker spends days collecting employee email addresses and scanning the company website for hidden vulnerabilities before attempting a break-in.

Which hacking phase does this describe?

• Attack

• Reconnaissance

• Expansion

• Obfuscation

A global healthcare company needs someone to oversee its entire security strategy, manage the teams that protect sensitive patient data, prevent data breaches, and ensure compliance with regulations.
Which role is responsible here?

• Security Architect

• Ethical Hacker

• Security Consultant

• Chief Information Security Officer (CISO)

To avoid getting caught, a hacker deletes system logs and uses fake user accounts, making it harder for investigators to trace the breach.
This action belongs to:

• Attack

• Expansion

• Reconnaissance

• Obfuscation

After gaining access, a hacker steals an administrator’s password and uses it to unlock confidential company files.
Which stage of hacking is this?

• Attack

• Expansion

• Reconnaissance

• Obfuscation

Once inside the system, the hacker installs malware that gives them remote access so they can return anytime, even if detected later.

• Attack

• Expansion

• Reconnaissance

• Obfuscation

A company adds a new online payment system to speed up customer transactions. Weeks later, hackers exploit weak default settings to steal credit card data.
Which type of cybersecurity risk does this illustrate?

• Business Operations

• Technology

• Internet of Things (IoT)

• Supply Chain