INV 1708 QUIZ 3

Which of the following is an example of an internal cybercrime?

• A hacker from another country breaches company data

• An employee stealing confidential company information for personal gain

• A phishing attack targeting employees via email

• A ransomware attack launched by an unknown cybercriminal

What distinguishes external cyber crimes from internal cyber crimes?

• Insiders commit external cyber crimes, while outsiders commit internal cyber crimes

• External cyber crimes only affect personal computers, while internal cyber crimes affect business networks

• Internal cyber crimes involve malicious activities by employees, while external cyber crimes are committed by hackers or cyber criminals outside the organization

• Internal cyber crimes are legal, while external cyber crimes are illegal

What is the primary role of a cyber detective?

• To investigate, analyze, and prevent cyber crimes using digital forensics and cybersecurity techniques

• To monitor employees’ social media activities

• To develop new software applications for businesses

• To physically patrol offices and prevent cyber crimes

Which of the following tasks is NOT typically performed by a cyber detective?

• Conducting digital forensic investigations

• Tracking and identifying cyber criminals

• Recovering lost or stolen digital data

• Creating and spreading malware to test security systems

What is the primary goal of risk assessment in an organization?

• To identify, analyze, and evaluate potential risks to minimize their impact

• To eliminate all potential risks completely

• To ensure that only external threats are considered

• To create more risks for testing security systems

Which of the following is the first step in the risk identification process?

• Conducting financial audits

• Identifying potential threats and vulnerabilities

• Ignoring minor risks and focusing only on major threats

• Implementing risk mitigation strategies

What is the primary purpose of risk mitigation strategies?

• To eliminate all risks in an organization

• To ignore low-level risks and focus only on major threats

• To reduce the likelihood and impact of potential risks through proactive measures

• To transfer all risks to a third party without taking any internal actions

Which of the following is an example of a risk mitigation strategy?

• Removing security policies to speed up operations

• Allowing employees to use weak passwords without restrictions

• Ignoring security threats to save costs

• Implementing cybersecurity protocols to protect sensitive data