Cybersecurity Risk Mitigation

What is the main purpose of NCSC Cyber Essentials?

• To provide advanced hacking techniques

• To help organisations protect against common cyber threats

• To create antivirus software

• To prevent hardware failures

Which of the following is an example of malware?

• Firewall

• VPN

• Ransomware

• Encryption

How does a firewall protect a network?

• It blocks all internet traffic

• It filters and controls incoming and outgoing network traffic

• It speeds up internet connections

• It scans for viruses on a computer

What is the main difference between a full backup and an incremental backup?

• A full backup saves everything; an incremental backup saves only changed data

• A full backup is faster than an incremental backup

• An incremental backup saves everything; a full backup saves only changed data

• Full backups are always stored in the cloud, while incremental backups are local

What does encryption do to data?

• Deletes it permanently

• Makes it unreadable to unauthorised users

• Copies it to a backup device

• Scans it for malware

Which of the following is a key benefit of using a Virtual Private Network (VPN)?

• It increases internet speed

• It protects your identity and encrypts your internet traffic

• It blocks all malware and phishing attacks

• It replaces the need for antivirus software

How can organisations reduce the risks associated with removable media (e.g., USB drives)?

• Allow employees to use any USB drive without restrictions

• Disable USB ports or require encrypted USB devices

• Encourage employees to share USB drives with colleagues

• Format all USB drives before every use

How can you tell if a website is using secure communication protocols (SSL/TLS)?

• It loads faster than other websites

• It has a padlock icon and "https://" in the address bar

• It does not require a password to log in

• It only works on certain browsers

Which of the following is NOT a key component of NCSC Cyber Essentials?

• Secure configuration

• User access control

• Hacking training

• Malware protection

What is the purpose of network segmentation?

• To allow free access to all network resources

• To divide a network into smaller parts to improve security

• To increase internet speeds for all users

• To replace firewalls in a security system