Cyber Security Quiz

What is a threat in cyber security?

• Any weakness in a system

• Any person, event, or action that could cause harm

• A security patch or update

• A method of encryption

What is a vulnerability?

• The likelihood of a breach

• The impact of an attack

• A weakness that a threat could exploit

• A new piece of software

Which of the following best defines a risk?

• A combination of threat and vulnerability

• The number of staff in the IT department

• A physical security measure

• A failed update

In the Harbour Systems Ltd scenario, which line shows a vulnerability?

• Suspicious login attempts detected overnight

• Single router (default admin password not changed)

• Financial loss and reputational damage possible

• Company recently migrated to the cloud

Which pair below correctly links a threat and its vulnerability?

• Phishing email → weak staff awareness

• Malware → password expiry

• Theft → antivirus update

• Power cut → visitor sign-in sheet

What does impact measure in a risk assessment?

• How likely a risk is to occur

• How much damage it could cause

• The cost of new software

• The number of staff affected

What does likelihood measure?

• The possible effect of the incident

• The number of systems affected

• The chance that the risk will happen

• The time it takes to fix

If a risk has high impact and high likelihood, what is its RAG rating?

• Red

• Amber

• Green

• Blue

The Operations team uses one shared login. What type of issue is this?

• Physical threat

• Insider misuse risk

• Software configuration error

• Hardware failure

“Suspicious remote logins detected” most likely relate to which threat?

• Unauthorised access

• Malware infection

• Equipment overheating

• Phishing simulation