Comp1300 Quiz1

Which of the following best describes the concept of "Defence in Depth" in cybersecurity?

• Using a single, highly secure firewall to protect an organisation

• Implementing multiple layers of security controls to mitigate threats

• Keeping all software up to date to prevent attacks

• Disconnecting critical systems from the internet entirely

What was the primary cause of the 2020 Toll Group cyberattack?

• A phishing email that compromised employee credentials

• A denial-of-service (DoS) attack that overwhelmed their servers

• An insider threat from a disgruntled employee

• A ransomware attack that exploited an unpatched system

Which social engineering attack involves an attacker looking over someone's shoulder to steal information?

• Shoulder surfing

• Smishing

• Dumpster diving

• Baiting

What makes spear phishing different from regular phishing?

• It targets a large group of people randomly

• It includes fake advertisements to trick users

• It is highly targeted towards a specific individual or organisation

• It only uses phone calls instead of emails

Which of the following is an example of "system hardening"?

• Ignoring software updates to maintain compatibility

• Disabling unnecessary services and closing unused ports

• Using public Wi-Fi to improve accessibility

• Storing passwords in a text document for easy access

How can an organisation protect itself from smishing attacks?

• By training employees not to click on suspicious links in text messages

• By installing antivirus software on desktop computers

• By setting up a firewall to block suspicious emails

• By encrypting all company data

Which of the following best explains the concept of "cyber hygiene"?

• Only using security measures when an attack is detected

• Installing firewalls and forgetting about security threats

• Allowing employees to set their own security protocols

• Regularly updating passwords and software to reduce vulnerabilities

In cybersecurity governance, which of the following is the most common impact of a major data breach?

• Companies refusing to adopt new security measures

• The immediate firing of all IT personnel

• Financial losses, reputational damage, and regulatory fines

• Cybercriminals returning stolen data voluntarily

Explain how the 2018 PageUp breach impacted businesses and individuals. What security measures could have prevented it?

Describe how an attacker might use baiting to compromise an organisation’s security. Provide an example.