Cybersecurity General Review

Company XYZ is implementing security controls to reduce the risk of unauthorized access to sensitive financial records. Which of the following is an example of a technical control?

• Security awareness training

• Employee background checks

• Encryption of database records

• Security policy enforcement

Answer explanation

Encryption of database records is a technical control that protects sensitive data by converting it into a secure format, preventing unauthorized access. The other options are administrative controls.

An employee at Acme Industries downloads a file from an unknown email sender. Shortly after, their computer starts encrypting files and demanding payment in Bitcoin. What type of malware is this?

• Rootkit

• Ransomware

• Spyware

• Adware

Answer explanation

The scenario describes ransomware, which encrypts files and demands payment, typically in Bitcoin. Other options like rootkits, spyware, and adware do not fit this behavior.

Beta Corp wants to implement a login system requiring employees to provide a password and scan their fingerprint. Which authentication method is being used?

• Single Sign-On (SSO)

• Multifactor Authentication (MFA)

• Role-Based Access Control (RBAC)

• Token-Based Authentication

Answer explanation

The login system requires both a password and a fingerprint scan, which involves two different factors for authentication. This is a clear example of Multifactor Authentication (MFA), enhancing security beyond just a password.

An attacker calls an employee at Omega Technologies pretending to be the company’s IT help desk, requesting their password to 'fix an account issue.' What type of attack is this?

• Phishing

• Spear phishing

• Vishing

• Smishing

Answer explanation

This scenario describes vishing, or voice phishing, where an attacker uses phone calls to trick individuals into revealing sensitive information, such as passwords, by impersonating a trusted entity.

The security team at Gamma Systems detects a security breach. According to the incident response lifecycle, what is the first step they should take?

• Containment

• Eradication

• Identification

• Recovery

Answer explanation

The first step in the incident response lifecycle is Identification. This involves detecting and confirming the security breach to understand its nature and scope before taking further actions like containment or eradication.

Alpha Corp wants to segment its internal departments so that only HR can access payroll systems. Which of the following should be used?

• VLANs

• NAT

• DNS Filtering

• Load Balancer

Answer explanation

VLANs (Virtual Local Area Networks) are used to segment network traffic, allowing only specific departments, like HR, to access certain resources such as payroll systems. This ensures security and access control.

SecureNet Inc. wants a system that monitors traffic and automatically blocks malicious activity in real-time. Which solution should they implement?

• Firewall

• IDS

• IPS

• VPN

Answer explanation

An IPS (Intrusion Prevention System) actively monitors network traffic and can automatically block malicious activity in real-time, making it the ideal solution for SecureNet Inc.'s needs.

Which encryption method is best suited for encrypting large volumes of data at rest on a server at Delta Corp?

• AES

• RSA

• ECC

• SHA-256

Answer explanation

AES (Advanced Encryption Standard) is ideal for encrypting large volumes of data at rest due to its efficiency and speed. Unlike RSA and ECC, which are better for small data or key exchange, AES is designed for bulk data encryption.

TechNova Inc. is moving to the cloud and wants to ensure that only authorized users can access data, even if credentials are stolen. What should they implement?

• Data Loss Prevention (DLP)

• Zero Trust Security

• Security Information and Event Management (SIEM)

• VPN

Answer explanation

Zero Trust Security ensures that access is granted based on strict identity verification, regardless of whether credentials are compromised. This approach minimizes risks associated with stolen credentials.

A cybercriminal sets up a rogue Wi-Fi network in a coffee shop named 'Public Wi-Fi' to capture login credentials from unsuspecting users. What type of attack is this?

• Evil twin attack

• Replay attack

• Man-in-the-middle attack

• DNS poisoning

Answer explanation

The attack described is an 'Evil twin attack', where a rogue Wi-Fi network mimics a legitimate one to intercept users' data, such as login credentials. This is distinct from other attacks listed.