Cybersecurity: CIA. threats and vulnerabilities

Which of the following is NOT considered a type of confidential company information?

• Salaries

• Trade secrets

• Public customer reviews

• Medical information

What does CIA stand for in the context of cybersecurity?

• Central Intelligence Agency

• Confidentiality, Integrity, Availability

• Cybersecurity and Information Assurance

• Computer Intelligence Assessment

Which of the following is a consequence of not maintaining confidentiality, integrity, and availability (CIA)?

• Increased customer trust

• Regulatory fines

• Improved brand image

• Stronger security posture

What is the importance of maintaining CIA in an organization?

• To maximize profits

• To promote negative brand image

• To avoid security risks

• To build trust with stakeholders

Which of the following is a technical threat to cybersecurity?

• Human error

• Natural disasters

• Denial-of-service (DoS) attack

• Social engineering

What type of malware encrypts a victim's files and demands a ransom for decryption?

• Spyware

• Ransomware

• Worm

• Trojan

Which non-technical threat involves manipulating individuals into revealing sensitive information?

• Botnet

• SQL injection

• Social engineering

• Buffer overflow

What is an example of a technical vulnerability?

• Inadequate security procedures

• Human error

• Weak encryption

• Malicious employees

Which non-technical vulnerability relates to employees not following established policies and procedures?

• Inadequate encryption

• Lack of recruitment screening

• Weak passwords

• Compatibility of legacy systems

What is a potential impact of threats and vulnerabilities on an organization?

• Increased brand reputation

• Unrestricted system access

• Loss of sensitive information

• Improved system operations