Cyber Security

Which of the following types of computer or system is most vulnerable to network attacks?

• A desktop computer connected to a wired LAN

• A laptop computer connected to a public Wi-Fi hotspot

• A smartphone connected to a cellular network

• A tablet computer connected to a Bluetooth speaker

What is the best practice for setting file permissions or privileges in an organisation?

• Granting full access to everyone

• Granting read-only access to everyone

• Granting access based on the principle of least privilege

• Granting access based on the principle of most privilege

What is the risk of installing software from an untrustworthy source or downloading illegal copies of software?

• The software may contain malware or spyware that can compromise the security of the system or data

• The software may not work properly or have bugs that can affect the performance of the system or data

• The software may violate the intellectual property rights of the original developer or publisher

• All of the above

Why is it important to keep the operating system updated and supported?

• To fix any security vulnerabilities or bugs that may be exploited by attackers

• To add new features or functionalities that may improve the user experience or productivity

• To maintain compatibility with other software or hardware components that may change over time

• All of the above

What is one of the main challenges of securing mobile devices?

• Mobile devices are more prone to physical theft or loss than desktop computers

• Mobile devices rely on OEMs to update the system software, which may be delayed or unavailable

• Mobile devices use wireless connections that may be intercepted or hacked by attackers

• All of the above

What is one of the most common methods of physical security breach?

• Using a USB storage device with malicious code or sensitive data

• Breaking into a locked room or cabinet where equipment or data is stored

• Collecting passwords and other information by social-engineering methods such as phishing or impersonation

• All of the above

What are some of the security implications of cloud computing and IoT devices?

• The data stored in the cloud or transmitted by IoT devices may be accessed by unauthorized parties or compromised by hackers

• The cloud service provider or IoT device manufacturer may have access to the data or control over the device, which may pose privacy or ethical issues

• The cloud service or IoT device may depend on internet connectivity, which may be unreliable or disrupted by attackers

• All of the above

Where can you find up-to-date sources of information on specific known hardware and software vulnerabilities?

• Official websites or blogs of hardware and software vendors or developers

• Online databases or repositories such as CVE, NVD, OWASP, etc.

• Online forums or communities where users share their experiences and solutions

• All of the above

What is an attack vector?

• A method or pathway used by an attacker to gain access to a system or network

• A tool or technique used by an attacker to exploit a vulnerability in a system or network

• A goal or objective pursued by an attacker to compromise a system or network

• All of the above

Which of the following is not an example of an attack vector?

• Wi-Fi

• Bluetooth®

• Internet connection

• Encryption key