Cybersecurity Expert Session 2k24

Which cryptographic technique is primarily used in securing communication over the internet?

• Steganography

• Public Key Cryptography (Asymmetric Encryption)

• Symmetric Key Cryptography

• Hashing

Answer explanation

This technique is primarily used in securing communication over the internet, particularly through protocols like SSL/TLS, ensuring secure key exchange and data encryption.

What is the difference between threat, vulnerability, and rusk in cyber security?

• Threat is the amount of money a company spends on security, vulnerability is the number of users in a system, and risk is the total size of the system’s network.

• Threat is the legal implications of a cybersecurity breach, vulnerability is the specific software being used, and risk is the frequency of software updates.

• • Threat: A potential danger that could exploit a vulnerability (e.g., malware).

  • Vulnerability: A weakness in a system that can be exploited (e.g., software flaw).

  • Risk: The likelihood and impact of a threat exploiting a vulnerability.

• Threat is a measure of how often a system is attacked, vulnerability is the strength of the security measures in place, and risk is the amount of data a system holds.

Answer explanation

• Threat: A threat is any potential danger or adverse event that could exploit a vulnerability in a system. For example, malware, hackers, and phishing attacks are threats that could compromise a system's security.

• Vulnerability: A vulnerability is a weakness or gap in a system's security defenses that could be exploited by a threat. This could be a software flaw, misconfiguration, or an insecure network protocol.

• Risk: Risk is the potential impact or likelihood of a threat exploiting a vulnerability and causing harm or damage. It is calculated based on the combination of the threat's likelihood and the potential impact of the vulnerability being exploited.

In summary, threats are potential dangers, vulnerabilities are weaknesses that can be exploited, and risk is the potential impact of those threats exploiting the vulnerabilities.

which standard is widely used for assessing the severity of software vulnerabilities?

• Common Vulnerability Scoring System (CVSS)

• ISO/IEC 27001

• PCI-DSS (Payment Card Industry Data Security Standard)

• GDPR (General Data Protection Regulation)

Answer explanation

The Common Vulnerability Scoring System (CVSS) is a standardized framework used to assess and score the severity of software vulnerabilities. It helps in evaluating the impact and urgency of addressing vulnerabilities by providing a numerical score and qualitative ratings based on factors like exploitability, impact, and environmental context.

Which type of attack attempts to trick users into providing sensitive information by injecting malicious code into web application?

• Denial-of-Service (DoS) Attack

• Man-in-the-Middle (MitM) Attack

• Brute Force Attack

• Cross-Site Scripting (XSS)

Answer explanation

Cross-Site Scripting (XSS) is an attack where malicious code is injected into a web application. This code runs in the user's browser, potentially stealing sensitive information like passwords or session cookies.

How does the "Same origin policy " in web browsers help mitigate security risks?

• It permits unrestricted access to any external server from a web application.

• It allows all websites to share cookies and session data freely.

• It restricts web applications from accessing data or making requests to different origins, protecting against cross-site data theft.

• It automatically encrypts all data transmitted between different origins.

Answer explanation

The "Same Origin Policy" helps mitigate security risks by restricting web applications from making requests or accessing data from a different origin (domain, protocol, or port) than the one that served the web page. This policy prevents malicious websites from accessing sensitive information from other sites through the user's browser.

Which https header can helps prevent cross site scripting (XSS) attack?

• Cache-Control

• Content-Type

• ETag

• Content-Security-Policy

Answer explanation

The Content-Security-Policy (CSP) header is the absolute correct answer. It helps prevent Cross-Site Scripting (XSS) attacks by allowing website administrators to control the sources of content that can be loaded and executed in the browser, significantly reducing the risk of malicious scripts being injected and executed.

what is "Red team vs Blue team" exercise in cyber security?

• Red Team vs. Blue Team is a hiring process for cybersecurity roles

• A Red Team vs. Blue Team exercise is a cybersecurity simulation where the Red Team attacks, and the Blue Team defends, to test and improve the security.

• It's a competition to develop new software features

• The Red Team and Blue Team work together to create a security policy

Answer explanation

A Red Team vs. Blue Team exercise in cybersecurity is a simulated scenario where the Red Team acts as attackers attempting to breach the system, while the Blue Team is responsible for defending against these attacks, identifying vulnerabilities, and strengthening the system's security. The goal is to test and improve the organization's security posture by simulating real-world cyberattacks and defensive responses.

In which industry is the concept of "Defence in depth " most critically applied?

• Entertainment industry

• cybersecurity industry

• Fashion industry

• Tourism industry

Answer explanation

The concept of Defense in Depth is most critically applied in the cybersecurity industry, where multiple layers of security controls are used to protect against various types of threats and vulnerabilities.

What does the concept of "Zero trust Architecture " (ZTA) emphasize?

• Emphasizes on never trusting by default and continuously verifying every user and device.

• Granting full access to any authenticated user

• Relying solely on perimeter security

• Trusting all users inside the network by default

Answer explanation

The concept of Zero Trust Architecture (ZTA) emphasizes that no entity, whether inside or outside the network, is trusted by default, and continuous verification of identity and access is required for every user and device.

Which domain in cybersecurity is primarily concerned with designing and managing security solution in cloud computing environment?

• Physical Security

• Application Security

• cloud security.

• Network Security

Answer explanation

The domain in cybersecurity primarily concerned with designing and managing security solutions in cloud computing environments is cloud security.