Internal Threats and Accidental Data Loss

Which scenario best illustrates employee sabotage rather than accidental loss?

• Leaving a laptop on a train ride

• Spilling coffee onto a office keyboard

• Deleting project files after a dispute

• Forgetting to log out of a workstation

What is a direct risk of an employee copying data to a USB drive and taking it home?

• Unauthorised disclosure and duplication online

• Faster disaster recovery procedures

• Improved data backup reliability

• Stronger physical access control

Which situation most clearly represents unauthorised access by an employee?

• Requesting extra disk space from support staff

• Using a colleague’s unlocked session to reach a server

• Saving files to a shared network folder

• Printing confidential reports for a meeting

Administrative privileges obtained by staff can enable which harmful action?

• Changing other users’ access rights

• Scheduling regular system backups

• Optimising printer queue settings

• Updating a public holiday calendar

Which weak security practice most increases the chance of opportunistic theft?

• Applying least-privilege policies

• Requiring two-factor authentication

• Using long unique passphrases

• Leaving a server room unlocked

A user visits an untrustworthy website at work and a virus spreads. This is best described as:

• Targeted ransomware with extortion

• Planned exfiltration using insider intent

• Exploitation of unsafe practices by accident

• Physical sabotage causing hardware failure

Which is the best immediate control to reduce risks from unattended logged-in sessions?

• Enforce automatic screen locking on idle

• Disable printing across the network

• Increase cloud storage quota for users

• Remove all external USB ports companywide

Which example is accidental data disclosure rather than malicious behaviour?

• Emailing a client list to a wrong address

• Installing a keylogger on a manager’s PC

• Disabling the endpoint antivirus system

• Brute-forcing a coworker’s password

Why does staff training help prevent accidental data loss?

• It removes the need for network monitoring

• It teaches secure device use and acceptable practices

• It guarantees zero malware on all systems

• It replaces the need for access control lists

Which monitoring method can identify poor practices and trace incidents?

• Collecting access logs and using keyloggers

• Blocking all web traffic to the internet

• Standardising desktop wallpaper images

• Encrypting external drives with AES-256