Mastering Cyber Safety and Security

Which of the following cryptographic protocols is used to provide end-to-end security for data in transit over the internet, and is considered more secure than its predecessor SSL?

• TLS 1.0

• TLS 1.3

• SSL 3.0

• SSH-2

Under the Australian Privacy Principles (APPs), which principle specifically addresses the issue of cross-border disclosure of personal information?

• APP 1

• APP 8

• APP 11

• APP 13

In the context of network security, what is the primary function of the Diffie-Hellman key exchange protocol?

• To encrypt data using symmetric keys

• To securely exchange cryptographic keys over a public channel

• To authenticate users in a network

• To provide digital signatures

Which type of malware is specifically designed to provide unauthorized access to a user's computer without being detected by security programs?

• Rootkit

• Adware

• Keylogger

• Botnet

What is the primary purpose of implementing a zero-trust security model in an organisation?

• To eliminate the need for firewalls

• To assume that threats could be both external and internal, and verify every request as though it originates from an open network

• To simplify network architecture

• To allow unrestricted access to all users

Which of the following best describes the concept of "data minimisation" in data privacy?

• Collecting as much data as possible for future use

• Limiting data collection to what is directly relevant and necessary to accomplish a specific purpose

• Storing data indefinitely for potential analysis

• Sharing data with third parties for marketing purposes

Which of the following is a characteristic of Advanced Persistent Threats (APTs)?

• They are typically short-lived and easy to detect

• They involve highly targeted and prolonged attacks often orchestrated by well-funded groups

• They are usually random and opportunistic

• They are primarily spread through email spam

In the context of cybersecurity, what does the principle of "least privilege" entail?

• Granting users the highest level of access by default

• Providing users with the minimum levels of access – or permissions – needed to perform their job functions

• Allowing unrestricted access to all network resources

• Disabling all user accounts by default

Which of the following is a method used to anonymise data, making it difficult to trace back to an individual?

• Data encryption

• Data masking

• Data tokenisation

• Data de-identification

What is the primary concern addressed by the concept of "digital forensics" in cybersecurity?

• Preventing data breaches

• Investigating and analysing data breaches and cybercrimes

• Developing new encryption algorithms

• Designing user-friendly security software