Module 3 Cyber Threats and Security Awareness Quiz

What is a hacktivist?

• A state-sponsored cyber adversary

• An insider threat perpetrating security violations

• A cyber attacker driven by ideological motives

• A malicious actor pursuing financial exploitation

Which of the following entities exemplifies a nation-state actor in the context of cyber operations?

• Conti ransomware syndicate

• Anonymous collective

• Script kiddies

• Fancy Bear (APT28)

What type of threat actor is classified as an insider threat within the context of cybersecurity?

• An inadvertent user inadvertently causing data breaches

• An employee or contractor intentionally compromising organizational security protocols

• A consortium of organized cybercriminals

• A hacktivist group advocating for a specific socio-political agenda

What is the primary motivation of organized crime syndicates?

• Intelligence operations

• Political machinations

• Monetary profit

• Ideological convictions

What is phishing in the context of cybersecurity?

• A network-based attack exploiting vulnerabilities in protocols

• A deceptive email or message designed to manipulate users into divulging sensitive information

• An insider threat involving unauthorized access by a trusted individual

• A type of malware that infiltrates systems through social engineering tactics

Which of the following represents a technique employed in social engineering attacks?

• Denial-of-Service (DoS) Attack

• Voice Phishing (Vishing)

• Ransomware Deployment

• SQL Injection Attack

What is the primary function of ransomware in cybersecurity?

• Exfiltrates sensitive user data

• Utilizes cryptographic algorithms to encrypt files and extorts a ransom for decryption keys

• Propagates through network vulnerabilities

• Obfuscates its presence by masquerading as legitimate applications

What is a common characteristic of a worm in the context of cybersecurity?

• Impersonates legitimate software to evade detection

• Requires user interaction for propagation

• Integrates with legitimate files to facilitate infection

• Exploits vulnerabilities to autonomously replicate across networks

What is SQL Injection?

• A type of malware

• A form of insider threat

• Exploiting vulnerabilities in database query execution

• A phishing technique

What is the primary function of multi-factor authentication (MFA) in enhancing cybersecurity protocols?

• To execute phishing simulations for user training

• To enforce robust password management policies

• To implement an additional layer of security through diverse authentication factors

• To analyze and monitor user behavioral patterns for anomalies