Exploring Cybersecurity Fundamentals

Which of the following is a primary purpose of a firewall in network security?

• To encrypt all outgoing emails

• To block unauthorised access to or from a private network

• To scan for malware on USB drives

• To manage user passwords

What is the main difference between a worm and a virus in malware analysis?

• Worms require human action to spread, viruses do not

• Viruses can self-replicate, worms cannot

• Worms can self-replicate and spread without human action, viruses usually need a host file

• Worms only infect mobile devices

Which of the following is a common sign of a phishing email?

• The email is sent from a known, trusted contact

• The email contains poor spelling and grammar, and asks for sensitive information

• The email is encrypted with AES-256

• The email contains only images and no text

Which encryption method is considered most secure for transmitting sensitive data over the internet?

• Caesar cipher

• Advanced Encryption Standard (AES)

• ROT13

• Base64 encoding

What is the first step in an effective incident response plan?

• Eradication of the threat

• Containment of the incident

• Preparation and planning

• Recovery of lost data

Which of the following best describes a Denial of Service (DoS) attack?

• An attack that steals user credentials

• An attack that encrypts files for ransom

• An attack that overwhelms a system, making it unavailable to users

• An attack that installs spyware

What is the main purpose of a cybersecurity policy in an organisation?

• To provide technical support to users

• To outline rules and procedures for protecting information assets

• To monitor internet usage

• To install antivirus software

Which of the following is NOT a type of malware?

• Trojan horse

• Ransomware

• Firewall

• Spyware

What is the main goal of data encryption?

• To compress files for storage

• To make data unreadable to unauthorised users

• To speed up network traffic

• To delete old files

Which of the following is an example of a social engineering attack?

• SQL injection

• Phishing email pretending to be from a bank

• Man-in-the-middle attack

• Brute force password attack