What is the primary purpose of a firewall in a computer network?

• To prevent physical access to the network

• To encrypt all data on the network

• To monitor and control incoming and outgoing network traffic

• To enhance the speed of the network

Answer explanation

Firewalls are designed to examine and control incoming and outgoing network traffic based on predetermined security rules.

What is the purpose of antivirus software?

• To protect against physical damage to the computer

• To detect and remove malicious software

• To prevent unauthorized access to the computer

• To optimize the computer's performance

Answer explanation

Antivirus software is specifically designed to identify and eliminate malicious software such as viruses, worms, and Trojans.

What is the purpose of encryption?

• To hide the computer's IP address

• To protect data from unauthorized access by converting it into a secure format

• To speed up data transmission over the internet

• To compress large files for storage

Answer explanation

Encryption transforms data into a secure format, making it unreadable without the appropriate decryption key, thus protecting it from unauthorized access.

What is the significance of Multi-factor authentication (MFA) in enhancing cybersecurity?

• Encrypts all data transmitted online using TLS/SSL

• Slows down internet connection speed

• Provides layered protection by requiring additional verification beyond passwords

• Prevents the installation of malware on a device

Answer explanation

Multi-factor authentication (MFA) is an account login process that requires multiple methods of authentication from independent categories of credentials to verify a user's identity for a login or other transaction.

Which of the following is a good practice to protect against phishing and malware attack?

• Ensure antivirus software is regularly updated

• Using public Wi-Fi for online banking

• Sharing passwords with trusted friends

• Avoid clicking on suspicious links or attachments

Answer explanation

What is the primary goal of a ransomware attack?

• Disrupting normal business operations for fun

• Stealing sensitive information

• Demanding payment for the release of encrypted data

• Gaining unauthorized access to systems

Answer explanation

Ransomware is a malware designed to deny a user or organization access to files on their computer. By encrypting these files and demanding a ransom payment for the decryption key, threat actor place organizations in a position where paying the ransom is the easiest and cheapest way to regain access to their files.

Most common form of cyber threat in Malaysia within the first 6 months in 2023?

• Phishing

• Malware

• DDoS

• Sim Swapping

Answer explanation

According to CSM 2023 mid year report on Malaysia's cyber threat landscape, phishing and malware are the primary areas of concern.

What is a VPN, and how does it enhance cybersecurity?

• A network for virtualized computers only

• A virus protection network for large organizations

• A system for preventing physical access to a computer

• A Virtual Private Network that encrypts internet traffic to ensure secure communication

Answer explanation

VPNs encrypt internet traffic, providing a secure and private connection, especially when using public networks.

What is a brute force attack?

• A type of malware that spreads rapidly across a network

• A method of gaining unauthorized access by exploiting software vulnerabilities

• An attempt to guess a password by trying all possible combinations

• A technique to manipulate individuals into divulging sensitive information

Answer explanation

What is the concept of "least privilege" in cybersecurity?

• Allowing users to have unlimited access to all system resources

• Granting users the minimum level of access necessary to perform their job functions

• Assigning the highest level of access to all users by default

• Restricting access to only the most critical system resources

Answer explanation

The principle of least privilege limits access for users to the minimum permissions required to perform their tasks, reducing the risk of unauthorized access.