Planet Cyber Quiz 1

Most common form of cyber threat in Malaysia within the first 6 months in 2023?

• DDoS

• Malware

• Sim Swapping

• Phishing

Answer explanation

According to CSM 2023 mid year report on Malaysia's cyber threat landscape, phishing and malware are the primary areas of concern.

Which sector in Malaysia was the most affected by ransomware in the first 6 months of 2023?

• Education

• Manufacturing

• Financial Industry

• Healthcare

Answer explanation

According to the CSM 2023 mid-year report on Malaysia's cyber threat landscape, the manufacturing and education sectors are among the highest numbers of ransomware victims.

What is the significance of Multi-factor authentication (MFA) in enhancing cybersecurity?

• Encrypts all data transmitted online using TLS/SSL

• Slows down internet connection speed

• Provides layered protection by requiring additional verification beyond passwords

• Prevents the installation of malware on a device

Answer explanation

Multi-factor authentication (MFA) is an account login process that requires multiple methods of authentication from independent categories of credentials to verify a user's identity for a login or other transaction.

Which of the following is a good practice to protect against phishing and malware attack?

• Ensure antivirus software is regularly updated

• Sharing passwords with trusted friends

• Using public Wi-Fi for online banking

• Avoid clicking on suspicious links or attachments

What is the importance of regularly updating software and operating systems in preventing cyber threats?

• Patches vulnerabilities and protects against exploitation by cybercriminals

• Enhances system performance

• Improves user interface design

• Ensures compatibility with new devices

Answer explanation

Regularly updating software and operating systems is crucial to fixing security vulnerabilities and preventing cyber attacks.

In the context of cybersecurity, what does the term "Zero Trust" imply?

• Trusting all users and devices by default

• Ignoring potential security risks within the organization

• Verifying and validating all users and devices, regardless of their location

• Granting unrestricted access to critical systems

Answer explanation

Zero Trust security means that no one is trusted by default from inside or outside the network, and verification is required from everyone trying to gain access to resources on the network.

Which of the following is a common social engineering technique used by cybercriminals in Malaysia?

• Man-in-the-Middle Attacks

• Phishing

• Cross-Site Scripting (XSS)

• SQL Injection

Answer explanation

The most common form of social engineering attack is phishing. Phishing attacks exploit human error to harvest credentials or spread malware.

What is the primary goal of a ransomware attack?

• Stealing sensitive information

• Disrupting normal business operations

• Gaining unauthorized access to systems

• Demanding payment for the release of encrypted data

Answer explanation

Ransomware is a malware designed to deny a user or organization access to files on their computer. By encrypting these files and demanding a ransom payment for the decryption key, threat actor place organizations in a position where paying the ransom is the easiest and cheapest way to regain access to their files.

What role does employee awareness play in cybersecurity?

• It helps employees become better at hacking

• It increases the likelihood of insider threats

• It is not relevant to cybersecurity

• It raises awareness and reduces the risk of human error

Which of the following is a recommended strategy for incident response in the event of a cybersecurity breach?

• Ignoring the breach and hoping it resolves on its own
• Blaming the IT department for the breach
• Paying off the hackers to keep the breach quiet
• Isolating the affected systems, conducting a thorough investigation, notifying relevant stakeholders, and implementing security measures to prevent future breaches.

Answer explanation

Follow your organization Cyber incident response plan (CSIRP). CSIRP clarifies individual roles, organizational policies, and industry standards when responding to a cybersecurity incident.