Font size
WorksheetsCybersecurity
Total questions: 77
Worksheet time: 50mins
What is Cyber security?
All the tools we use and actions we take to keep computers safe.
Protecting your computer against hackers
Being secure against cyber bots
What is malware?
Hackers trying to hack your computer.
Term for any software that is designed to harm or do illegal activities.
Term for cookies trying to invade your computer and implement viruses.
What is a worm?
A worm you see outside in the dirt.
A software used to worm into your computer.
Malware that can infect and spread without human assistance.
What is a Trojan Horse?
A big wooden horse used to attack Troy in ancient Greece.
A program with hidden malicious functions.
A program that tricks your computer and destroys it with the power of Social engineering.
What is spyware?
Malware that collects information about you without your consent or knowledge.
A program that looks through you laptop camera and allows your FBI Agent to see you.
A program that allows you to become a better spy and gives you tools to spy on your friends.
What are loT devices?
Anything that is connected to the internet.
Smartphones, smart lightning, and connected speakers.
Devices that need a special key to unlock them.
Devices that require security procedures in order to keep them as uncompromised as possible, ex: Government computers.
What is a zombie bot?
Compromised computers under the control of a hacker.
A bot that pretends it is dead but once it reaches your computer it takes over.
This does not exist.
What is netiquette?
A term used to describe network attacks.
A malware that pretends to have ethical standards but attacks you when you least suspect it.
The term for commonly accepted rules of how to behave online.
What is a firewall?
A wall made of fire in your computer to make sure your computer is heated up and running properly.
A software used to attack other security measures in your computer to insure your computer is safe.
A filter that filters incoming data, protecting a network from attacks.
What is one way that you can prevent
identity theft?
Maxing out your credit card
Throwing personal documents away without
shredding them
Opening several accounts
Examining bank accounts
on a regular basis
What should you do if someone asks for your
password?
Provide your password to your supervisor
Provide your password to Help Desk
Do not give your
password out to anyone
Provide your password to the IT security officer
Which of the following is true about
phishing?
Phishing is an act of catching fish for dinner.
Phishing is an attempt
to acquire sensitive information such as passwords for malicious reasons.
Phishing is forgetting your password and
contacting IT to reset.
Phishing is a virus that will not allow you to
log onto your computer.
What is a RansomWare Virus?
A virus that makes all
contexts on your computer unreadable and demands money to unlock your computer.
A virus that will not allow you to turn your
computer on.
A virus that sends a mass email to your address
book that includes a link to the malware.
A virus that will make you sick.
Which of the following information is
important in protecting client’s data?
Health insurance beneficiary numbers
Phone numbers
Zip codes
All of the above
If you receive an attachment from someone you don't know, you should never open it.
True
False
The _____ type of malware is code attached to another file. The malicious code automatically makes copies of itself and drops its payload when the host file is opened.
Virus
Worm
Keystroke logger
Toolbar
Which of the following may result in a malware infection?
Opening an email attachment
Downloading a file from a website
Clicking on an infected link
All of the above
What damage can be caused by malware?
Computer crashes
The compromising personal information, which may lead to identity theft
Permanent deletion
All of the above
The _____ type of malware collects personal information and sends it to a third party.
Worm
Toolbar
Homepage hijacker
Spyware
Which of the following is not effective in preventing malware infections?
Opening email attachments
Turning on Windows Automatic Updates
Installing anti-virus software
Setting Internet Explorer's security setting to medium-high
You receive an email with the subject “Immediate Action Required needed on your credit card account.” Why is this suspicious?
Because it is illegal to send credit offers in email
Because your credit card company does not use email
This email is not suspicious
The subject line is demanding immediate action
How should you confirm the legitimacy of an email?
Contact the sender through a method not described in the email
Reply to the email
Send a letter to the address listed in the email
Call the phone number listed in the email
You receive an email from Human Resources Department. The email asks for your birthdate and home address to set up your retirement account. You should:
Forward the email to your financial advisor
Reply to the email with the required information
Ignore the email and directly contact your Human Resource representatives to see if the email is legitimate.
Reply to the email to confirm with your Human Resources department and then send the requested information
you receive an unexpected email from a co-worker, asking you to review an attached document. You should.
Open the attachment and review it immediately
Reply to the email to confirm the attachment came from your co-worker
Without replying to the email, confirm that your co-worker sent the attachment
Download the attachment and wait to open it until you can confirm with your co-worker
What might phishing emails try to get you to do?
Click Links
Download files
All of these
Fill out forms
What is the goal behind phishing emails?
Gain private information
All of these
Lower your defenses
Help attack other targets
You receive an email explaining that you won a tablet. What should you do next?
Provide the required information and request overnight shipping
Ignore and delete the email
Follow the links in the email to investigate the offer further
Forward the email to your friend so they can receive a free tablet too
You are visiting your favourite website and it warns you that your Flash plugin is out of date. What should you do next?
Install the update from your favorite website
Install the update using a private browsing session
Only download the update from the official source
Ignore updates on your computer
You found a USB drive and want to return it to the owner. You wonder if information on the drive could help you find the owner. What should you do with it?
Ask a qualified IT person for help
Drop the flash drive into a mailbox
Look for the owner information by inserting the drive and looking through the files
Put the flash drive in a drawer until you have the chance to update your antivirus
How can malware be distributed?
Found USB drives
Email attachments
All of these
Browser Plugins
Which of the following is the best password?
V3ry_Long_H1pp0
Which key term has the following definition:
"Restricts the files and folders a user can open"
Access Rights
Malware
Properties
Hacking
Which keys when pressed together bring up a menu with an option to change your password?
<Ctrl>, <ALT>, <Delete>
<Ctrl>, <Shift>, <Esc>
<Windows>, <Tab>
<Ctrl>, <Shift>, <Tab>
What does PIN stand for?
Private Identification Number
Which of the following options allows you to be uniquely identified on a network?
Password
PIN
Username
Access Rights
In the control panel, you can see if a f (a) is running.
This stops suspicious network traffic reaching your device.
An anti-virus protects against lots of types of m (a)
Using a p (a) helps stop people from being able to access your account easily
Attempting to gain access to files and folders without permission is known as h (a)
Which of the following options are recommended for a strong password?
Tick all that apply.
Should contain at least 8 characters
Should contain a mix of letters, numbers and symbols
Should not contain personal information (birthday, name, etc)
Computer security, information security, and information technology (IT) security all mean the same thing and are interchangeable terms.
True
False
Counterintelligence is an important function and can be applied in private sector companies as well as in government agencies.
True
False
Legal measures are generally “ reactive ” rather than “ proactive ” in nature.
True
False
According to consultant Michael Moberly, approximately what percentage of a company’s value generally lies in information and intangible assets?
90%
50%
10%
75%
The practice of asset protection focuses on which categories of “ assets ” ? (Circle all that apply.)
Information
Physical
People
Property
Which of the following is NOT a characteristic of the Economic Espionage Act of 1996?
It makes it a federal crime to steal trade secrets
It is a forward-looking piece of legislation
It includes “ altering ” information as a prohibited act
It must be updated every 5 years
According to this chapter, the field of “ information security ” includes:
Competitive intelligence
IT security
Intellectual property protection
Traditional information security
When an information loss is known or suspected, the following actions should be taken:
Corrective actions
Damage assessment
Containment
Determine root cause
Information that is lost is not permanently lost
True
False
An important tool in protecting information assets is the Economic Espionage Act (EEA) of 1996
True
False
Computer security, Information security, and information technology security all mean the same thing and are interchangable.
True
False
Counterintelligence is an important function and can be applied in private sector companies as well as in government agencies.
True
False
Legal measures are generally "reactive" rather than "proactive" in nature.
True
False
According to consultant Michael Moberly, approximately what percentage of a company's value generally lies in information and intangible assets?
90%
50%
10%
75%
The practice of asset protection focuses on which catagories of "assets"?
Information
Physical
People
Property
Which of the following is NOT a characteristic of the economic Espionage Act of 1996?
It makes it a federal crime to steal trade secrets
It is a forward-looking piece og legislation
It includes "altering" information as a prohibited act
It must be updated every five years
According to this chapter, the feild of "information security" includes:
Competative intelligence
IT security
Intellectual property protection
Traditional information security
When an information loss is known or suspected, the following actions should be taken:
Corrective actions
Damage assesment
Containment
Determine root cause
Information that is lost is not pemanetly lost
True
False
An important tool in protecting information assets is the Economic Espionage Act of 1996
True
False
What are the three triads of cybersecurity?
Confidentially, Integrity, Availability
Confidentially, Intellectual, Availability
Combining, Intellectual, Accessibility
Combining, Integrity, Accessibility
Alice told her friend about her password of wechat. What triad does she violate?
Confidentially
Integrity
Availability
Alice told her friend Bob about her email password. And then she found Bob used her email sent emails to others. Who is responsible for this case?
Alice
Bob
Alice and Bob
Alice told her friend Bob about her email password. And then she found Bob changed some her emails and sent emails to others. What traids are involved into this case?
Confidentially and Integrity
Integrity and Availability
Confidentally and Availability
Confidentally, Integrity and Availability
Alice has a company which is not well-run comparing with Bob's. So she decided sent some malware to servers of Bob's company. What traid she violated?
Confidentally
Integrity
Availability
Alice needs some money. She went to ATM to withdraw some money. She covered her password when she was inputing, withdrew the money and she took her card back. However, her money has been stolen. Then she found the ATM has the trojan program could copy the chip of her card and still has a micromonitor let hackers to see her password. What is correct in this case.
Alice violated Availability traid
The hacker violated Availability traid
Alice violated confidentally traid
The hacker violated confindentally traid
Encryption is...
Organisational procedure to keep an electronic copy of important data (either on site or off site).
This is the process of encoding a message or information in such a way that only authorised parties can access it.
Back up data is...
Organisational procedure to keep an electronic copy of important data (either on site or off site).
Ensure that employees are well informed before accessing the company computer system.
Using read only files is when...
This is when a business stops employees from using their own pen drives, CDs etc.
The master document/file cannot be edited on the system. It ensures that information is not easily deleted by inexperienced members of staff.
Restricting access on IT is ...
Keeping computers and storage devices locked away, make use of finger print scanners and key cards to ensure information is kept safe.
Issuing and using usernames to prevent unauthorised members of staff accessing files that they do not have permission to use.
Restricting physical access is ...
Keeping computers and storage devices locked away, make use of finger print scanners and key cards to ensure information is kept safe.
Issuing and using usernames to prevent unauthorised members of staff accessing files that they do not have permission to use.
An anti-virus is ...
Software designed to prevent, detect and remove malware infections on individual computing devices, networks and IT systems (like viruses and worms).
A network security system that grants or rejects network access to traffic flows between an untrusted zone (like the internet) and a trusted zone.
A firewall is ...
Software designed to prevent, detect and remove malware infections on individual computing devices, networks and IT systems (like viruses and worms).
A network security system that grants or rejects network access to traffic flows between an untrusted zone (like the internet) and a trusted zone.
