Cyber Incident Quiz

What was the main type of cyber incident reported at CME?

• Ransomware attack

• Phishing email

• Distributed Denial of Service (DDoS) attack

• Malware infection

Answer explanation

The main type of cyber incident reported at CME was a phishing email, which is a common tactic used to deceive individuals into providing sensitive information, unlike ransomware or DDoS attacks.

Which employee first reported the phishing incident?

• Joanne Reedsman

• Andrew Caelcabben

• Chelsi Geongran

• The electricians

Answer explanation

Chelsi Geongran was the first employee to report the phishing incident, making her the correct choice among the options provided.

What sensitive information was included in the phishing email?

• Credit card numbers

• Bank account details

• User passwords

• National Insurance Numbers

Answer explanation

The phishing email included user passwords, which are highly sensitive as they grant access to personal accounts. Other options like credit card numbers and Social Security Numbers were not specified as included in the email.

How were the compromised passwords likely obtained?

• A keylogger on the system

• A public data breach

• CME's internal systems were hacked

• Chelsi shared them with a colleague

Answer explanation

The compromised passwords were likely obtained through a public data breach, where user credentials are exposed and can be accessed by malicious actors. This is a common method for acquiring passwords.

What was a key recommendation given to Chelsi regarding password management?

• Use the same password for all accounts

• Write down passwords in a notebook

Answer explanation

Writing down passwords in a notebook is a practical way to manage them securely, as it helps avoid forgetting them. Using the same password for all accounts is risky, and it's not advisable to rely solely on memory.

What could have prevented the phishing email from reaching Chelsi?

• Multi-factor authentication

• Advanced email filtering

• Disabling internet access

• Encrypted email communication

Answer explanation

Advanced email filtering could have identified and blocked the phishing email before it reached Chelsi's inbox, preventing potential harm. Other options do not directly stop the email from arriving.

What does phishing primarily rely on to succeed?

• Exploiting software vulnerabilities

• Tricking users into providing sensitive information

• Accessing encrypted files

• Brute-forcing passwords

Answer explanation

Phishing primarily relies on tricking users into providing sensitive information, such as passwords or credit card details, often through deceptive emails or websites, rather than exploiting software vulnerabilities or using brute-force methods.

What cybersecurity principle ensures each account has a unique password?

• Non-repudiation

• Confidentiality

• Password uniqueness

• Least privilege

Answer explanation

The principle of password uniqueness ensures that each account has a distinct password, enhancing security by preventing unauthorized access through shared or reused passwords.

What proactive measure can be implemented to protect against phishing?

Answer explanation

Implementing multi-factor authentication (MFA) is a proactive measure to protect against phishing. MFA adds an extra layer of security, making it harder for attackers to gain access even if they obtain login credentials.

What is a common tool for managing strong, unique passwords?

• Password manager

• Email client

• Firewall

• Proxy server

Answer explanation

A password manager is a tool designed to store and manage strong, unique passwords securely. It helps users generate, retrieve, and organize passwords, making it easier to maintain security across multiple accounts.