Understanding IT Security and Cryptography

What is a common type of IT security threat that involves tricking individuals into revealing sensitive information?

• Phishing

• Malware

• Denial of Service

• Man-in-the-Middle

Answer explanation

Phishing is a common IT security threat that deceives individuals into providing sensitive information, often through fake emails or websites. It specifically targets personal data, making it the correct answer.

Which of the following is a computer network-based threat that involves overwhelming a system with traffic to make it unavailable?

• Spyware

• Denial of Service

• Ransomware

• Trojan Horse

Answer explanation

The correct answer is 'Denial of Service' (DoS), which is a network-based threat that floods a system with excessive traffic, rendering it unavailable to users. Other options like spyware and ransomware serve different malicious purposes.

What is the primary goal of information security?

• To increase network speed

• To protect data confidentiality, integrity, and availability

• To reduce hardware costs

• To improve software usability

Answer explanation

The primary goal of information security is to protect data confidentiality, integrity, and availability, ensuring that sensitive information is safeguarded against unauthorized access, alteration, and loss.

Which legal requirement affects the security of IT systems in the UK?

• General Data Protection Regulation (GDPR)

• Sarbanes-Oxley Act

• Health Insurance Portability and Accountability Act (HIPAA)

• Digital Millennium Copyright Act (DMCA)

Answer explanation

The General Data Protection Regulation (GDPR) is a key legal requirement in the UK that mandates strict data protection and privacy measures, directly impacting the security of IT systems handling personal data.

What is a potential impact of a security breach on an organisation?

• Increased employee productivity

• Loss of customer trust and financial loss

• Improved public relations

• Enhanced system performance

Answer explanation

A security breach can lead to significant loss of customer trust, as clients may feel their data is not safe. This often results in financial loss due to decreased sales and potential legal costs, making it the most impactful consequence.

Which principle of cryptography ensures that a message can only be read by the intended recipient?

• Integrity

• Confidentiality

• Availability

• Non-repudiation

Answer explanation

Confidentiality is the principle that ensures only the intended recipient can read a message, protecting it from unauthorized access. This is crucial for secure communication.

Which cryptographic method uses the same key for both encryption and decryption?

• Asymmetric encryption

• Symmetric encryption

• Hashing

• Digital signatures

Answer explanation

Symmetric encryption uses the same key for both encryption and decryption, making it efficient for secure data transmission. In contrast, asymmetric encryption uses a pair of keys, and hashing is a one-way function, not for encryption.

What is an example of an application of cryptography in everyday life?

• Online banking

• Word processing

• Video streaming

• Graphic design

Answer explanation

Online banking uses cryptography to secure transactions and protect sensitive information, ensuring that users' financial data remains confidential and safe from unauthorized access.

Which of the following is a technique used to protect data by converting it into a secure format?

• Compression

• Encryption

• Fragmentation

• Defragmentation

Answer explanation

Encryption is the technique used to protect data by converting it into a secure format, making it unreadable to unauthorized users. Compression, fragmentation, and defragmentation do not provide data security.

What is the effectiveness of using firewalls as a protection technique?

• They completely eliminate all security threats

• They help prevent unauthorized access to or from a private network

• They increase the speed of data transmission

• They are only effective against physical threats

Answer explanation

Firewalls are effective in preventing unauthorized access to or from a private network, acting as a barrier between trusted and untrusted networks. They do not eliminate all threats or increase data transmission speed.