Font size
WorksheetsSecurity Concepts
Total questions: 123
Worksheet time: 1hrs 12mins
What does the principle of confidentiality in information security ensure?
Data availability
Data privacy
Data accessibility
Data accuracy
Which security principle focuses on maintaining the accuracy and trustworthiness of information?
Integrity
Authentication
Authorization
Accountability
What does the principle of availability in information security ensure?
Data accessibility
Data accuracy
Data integrity
Data privacy
What is the process of verifying the identity of individuals or systems to grant access based on their credentials called?
Authorization
Non-Repudiation
Accountability
Authentication
What does the principle of non-repudiation in information security ensure?
Data accuracy
Data accessibility
Data privacy
Authenticity of actions or communication
What is the process of identifying, assessing, and mitigating risks to protect information assets and systems called?
Security Policies
Security Awareness
Incident Response
Risk Management
What is the process of developing plans and procedures to respond effectively to security incidents and breaches called?
Security Policies
Incident Response
Security Awareness
Risk Management
What is the process of establishing rules and guidelines to govern security practices within an organization called?
Security Awareness
Security Policies
Incident Response
Risk Management
What is the process of educating employees and users about security policies, best practices, and potential threats called?
Risk Management
Incident Response
Security Awareness
Security Policies
Which security principle focuses on ensuring that information and systems are available and accessible when needed?
Availability
Authorization
Authentication
Integrity
What is the process of ensuring that information and systems are available and accessible when needed called?
Availability
Authorization
Authentication
Integrity
What is the process of maintaining the accuracy and trustworthiness of information called?
Integrity
Authentication
Authorization
Accountability
What is the process of identifying, assessing, and mitigating risks to protect information assets and systems called?
Security Policies
Security Awareness
Incident Response
Risk Management
The security of computers and users information
Cybersecurity
Computer virus
Phishing
Spam
It can harm computer, control computer
Crime
Social network
Computer Virus
Cybersecurity
Crimes commited by computers or network
Cybersecurity
Cybercrime
Threat
Social network
People commit cybercrimes
Doctors
Programmers
Huckers
Teachers
How many types of cybercrimes is there?
1
2
3
4
Which is Not a type of Cybercrime?
Phishing
DDOS
Computer virus
IOS
Commit
Жасау/ совершать
Спам
Сену\ доверять
жалган \ фиктивный
Trust
Жасау \ совершать
Спам
Сену\ доверять
Жалган \ фиктивный
Infect
Жұқтыру \ заражать
тарату\ распространать
орналастыру\ размещать
қауіп\угроза
to spread
тарату \ распространять
урлау\ красть
жуктыру\ заражать
орналастыру \ размещать
to post
тарату \ распространять
жуктыру\ заряжать
қауіп \ угроза
орналастыру \ размещать
Update
тарату \ распространять
орналастыру\ размещать
обновить\ жанарту
жуктыру\ заражать
The implementation of which security method has the greatest positive influence on security?
Mature Identity & Access Management
Implementation of strong password guidelines & password management
Application of Secure Coding Methods
Holistic People Powered Security in the organisation
What is the biggest cyber security threat?
The human factor
Malware of any kind
Unencrypted communication
Theft of mobile devices
What measures can be taken to minimize the attack surface for social engineering?
Use of password managers
Encryption of all communication and data
Work exclusively in a secure environment
Minimizing the communication of personal information
Which password is most secure?
LO4ndon7
#fr41963§
%27T#wbZ3
LondonattheThames2019
What are the consequences of a virus?
It is destroying your screen.
It opens your e-mail account
It deletes/copies data
It will help you work.
Generic term for all methods used to spy on passwords.
Cyber Grooming
Information Diving
Phishing
Clustering
Someone's trying to gain access to a computer network.
Cyber Grooming
Information Diving
Pretexting
Hacking
A Trojan stores a file on my hard drive that redirects me to fake websites.
Cyber Grooming
Phishing
Pharming
Pretexting
Generic term for methods of gaining access to passwords, etc., by researching a person's personal environment.
Pharming
Cyber Grooming
Pretexting
Social Engineering
What information do cookies store?
You remember the search history, what you looked at and with which email you registered.
What make cookies possible?
They make it possible to monitor and control a user
Store data of your passwords
A strong password shouldn't contain :
Capital and small letters
Common marks /? ().......
Numbers
personal data
An unskilled person who uses programs developed by others to hack.
Script Kiddie
Hacktivist
Nation-State Hacker
Cybercriminal
What is one way hackers use to acquire your password?
Two Factor Authentication (2FA)
Thesaurus
Brute force
key blogger
It is a form of cyber attack that attempts to make the user give up their sensitive information by disguising as a legitimate person or entity thru e-mail, messaging app, or telephone.
Man-in-the-Middle Attack
brute force
malware attack
phishing
One of the biggest cyber heist in history where 81M USD was transferred to a Philippine bank.
Bangladesh Bank heist
South Korea Bank Heist
AMEX Bank Heist
India Central Bank heist
Lack of awareness and ____ make the perfect set up for a successful cyber attack or cybercrime.
panicking
lack of awareness
rushing
lack of technology
This is the psychological manipulation of people into performing actions or divulging confidential information.
social engineering
man-in-the-middle attack
social disclosure
eavesdropping attack
A cyber attack in which the data on a victim's computer is locked, typically by encryption, and payment is demanded before the data is decrypted and access returned to the victim.
DDoS Attack
kidnap for ransom
ransomware
data hack
Aside from PNP Anti-Cybercrime Group, what is the other law enforcement agency mandated to handle cybercrime cases?
CICC
DICT
DOJ Office of Cybercrime
NBI Cybercrime Division
______ is a deliberate exploitation of computer systems, technology-dependent enterprises, and networks.
cyber attack
cybercrime
cyber threat
cyber incidence
The best way to back-up your files.
cloud
external hard drive
123 backup plan
321 backup rule
The collection of tools, policies, security concepts, etc. to protect the cyber environment.
information security
data security
cybersecurity
cyber hygiene
Criminals stealing data from online accounts is
Identity Theft
Normality
Trial and Error method of hacking passwords is called
Brute Force Attack
Malware Attack
Unknown programs that startup when you turn on your computer is because of
Computer Virus
System Issue
Stealing of data is Cyber Crime
False
True
FTC stands for
Federal Trade Commission
Federal Telecom Community
________ involves sending an innocent-looking e-mail or web site designed to fool people into revealing confidential information.
Phishing
Dumpster Diving
A "Good" passwords should have a
Minimum number of characters, include non-alphabetical characters, and numbers
Common word
It is used to refer to the security offered through on-line services to protect your online information.
Cyber Security
Human Security
Social Security
Network Security
It is a combining form relating to information technology, the Internet, and virtual reality.
Cyber
Hyper
Alter
Booster
Which of the following is not a major security problem?
Hacker
Hacker
Malware
Booster
It is a “program that is loaded onto your computer without your knowledge and runs against your wishes.
Hacker
Hardware
Booster
Virus
Is a person who breaks into computers, usually by gaining access to administrative controls.
Hacker
User
Gamer
Developer
Which among the following is not a type of hacker?
White Hat Hacker
Grey Hat Hacker
Black Hat Hacker
Blue Hat Hacker
It is any software that infects and damages a computer system without the owner's knowledge or permission.
Hacker
Hardware
Malware
Spyware
These are email viruses that can duplicate themselves,
steal information, or harm the computer system.
Worms
Trojan Horses
Rootkits
Spyware
These are attacks by hackers that are able to determine passwords or find passwords to different protected electronic areas and social network sites.
Password Attacks
Trojan Horses
Viruses
Spywares
The word "malware" comes from the term?
Malfunction Software
Malicious Software
Malcontent Software
Maltreated Software
Anny recently implemented an intrusion prevention system designed to block common network attacks from affecting his organization. What type of risk management strategy is Anny pursuing?
Risk Acceptance
Risk Avoidance
Risk Mitigation
Risk Transference
Which of the following principles expects an individual to behave reasonably under any given circumstance?
Due Diligence
Separation of Duties
Due Care
Least Privilege
What type of malware is characterized by spreading from system to system under its own power by exploiting vulnerabilities that do not require user intervention?
Trojan Horse
Virus
Logic Bomb
Worm
Which one of the following security programs is designed to establish a minimum standard common denominator of security understanding?
Training
Education
Indoctrination
Awareness
Which one of the following is an example of physical infrastructure hardening?
Antivirus Software
Hardware-based Network Firewall
Two Factor-Authentication
Fire Suppression System
Which information security goal is impacted when an organization experiences a DoS or DDoS attack?
Confidentiality
Integrity
Availability
Denial
What is the best way to provide accountability for the use of identities?
Logging
Authorization
Digital Signatures
Type 1 Authentication
Management support is critical to the success of a business continuity plan. Which of the following should be provided to the management to obtain their support?
Business Case
Business Impact Analysis
Risk Analysis
Threat Report
Which of the following is a critical first step in disaster recovery and contingency planning?
Plan Testing and Drills
Complete a Business Impact Analysis
Determine Offsite Backup Facility Alternatives
Organize and Create Relevant Documentation
What type of encryption is typically used for data at rest?
Asymmetric Encryption
Symmetric Encryption
DES
OTP
If Harry's organization requires him to log in with his username, a PIN, a password, and a fingerprint scan, how many distinct types of factors has he used?
One
Two
Three
Four
Mr. A has worked in human relations, payroll, and customer service roles in his company over the past few years. What type of process should his company perform to ensure that he has appropriate rights?
Reprovisioning
Account Review
Privilege Creep
Account Revocation
Which one of the following cryptographic goals protects against the risks posed when a device is lost or stolen?
Non-repudiation
Authentication
Integrity
Confidentiality
All of the following are ways of addressing risk, except:
Acceptance
Reversal
Mitigation
Transfer
Which of the following should include the process of hardening a device?
Encryption the OS
Updating and Patching the System
Using Video Cameras
Performing through Personal Background Checks
The cloud deployment model that features ownership by a cloud provider, with services offered to anyone who wants to subscribe, is known as:
Private
Public
Hybrid
Latent
It is important to classify and determine the relative sensitivity of assets to ensure that:
The cost of protection is in proportion to the sensitivity
Highly sensitive assets are protected
The cost of controls is minimized
Countermeasures are proportional to the risk
What is the most important factor in the successful implementation of an enterprisewide information security program?
Realistic Budgets Estimates
Security Awareness
Support of Senior Management
Recalculation of the work factor
Which of the following is the best approach to obtain senior management commitment to the information security program?
Describe the reduction of the risk
Present the emerging threat environment
Benchmark against other enterprises
Demonstrate the alignment of the program to business objectives
The primary focus of the change control process is to ensure that the changes are:
Authorized
Applied
Documented
Tested
What is a computer hacker?
A virus that invades your computer and causes it to not work
A person who sends lots of e-mails to people asking for money
A person who uses a computer to illegally breaks into your computer and take your information
A person who cuts or hacks at something
What is cybersecurity?
the state of being protected against the criminal or unauthorized use of electronic data,
Security against breaking into your house
Top secret Government security
What is Phishing?
Phish is a made up word
Fishing for pirahnas and perch
the fraudulent practice of sending emails that seem to be to be from reputable companies in order to convince individuals to reveal personal information, such as passwords and credit card numbers.
The practice of breaking into a persons computer to steal their data by using a virus
What is a mobile browser?
a web browser built to use on mobile devices like mobile phones
a search engine
a person who searches for information on the Internet
What is electronic data?
Data that is electric
answers to questions you ask on the Internet
data made up of 1's and 0's
data that is exchanged via electronic communication lines · digital data
What is Social Engineering?
manipulation of people on the Internet into giving away confidential information.
Mining for peoples lost jewelry
A type of engineering where you build houses for groups of people
What is a password?
When you pass a word around until someone gets the meaning right
a secret word or phrase that must be used to gain admission to your online account
A type of vocabulary football
What is computer malware?
A malicious attack using the mail
software that is specifically designed to disrupt, damage, or gain unauthorized access to a computer system.
Computer software that is made to track your movements
What is a cyber attack?
an attempt by hackers to damage or destroy a computer network or system.
when someone shoots your computer
an attack on cybers
when someone robs an atm machine
What is ransomware?
A type of threat that holds onto your computer until you pay your fines
When someone tells you what you have to wear
a type of malicious software designed to block access to a computer system until a sum of money is paid.
What is a computer backup?
When your computer is operating very slowly
copies of the original files that you have on your laptop, desktop, or external drive.
When you save your original files onto your desktop
What is a computer virus?
When a hacker breaks into your computer system
A sickness that your computer can pas on to you
When your computer is infected with the flu
a piece of code which is capable of copying itself and typically has a detrimental effect, such as corrupting the system or destroying data.
What is encryption?
A person who tricks you into giving your password
converting information or data into a code to prevent unauthorized access.
To upload your personal data to the cloud
When there is a security breach in your data
Should you share your personal information with strangers?
Yes
No
If somebody asks you to give your password, what should you not do?
Give them the password straight away
Close the mail/page
Call a parent
Report and Block them
When you receive an e-mail that has an attachment from a stranger, you should:
Read it carefully and then decide.
Open it straight away
You should keep different and strong passwords for every site.
True
False
If you see a site that is not secure you should:
Leave the site
Stay on the site
Stay on the site but switch of your device
Eat the phone
It can harm your computer and control it
Crime
Social network
Computer Virus
Cybersecurity
Why do people carry out cyber attacks?
Financial Gain
Fun/Challenge
To disrupt the business
Personal grudge
Hacking is illegal
True
False
What does unauthorised mean?
Not allowed
Allowed
What is hacking?
Accessing a computer system without permission
Accessing a computer system with permission
Access a computer without permission (hacking) is in breach of the...
Communications Act
Data Protection Act
Computer Misuse Act
One of the weakest points of computer systems are...
Software that has not been updated
Badly configured systems
Users who choose weak passwords
What is Two Factor Authentication?
A security feature that sends a text to your phone when you try to login to a website with a code to use
Asks you further security questions when you login from an unusual location
A way of checking that the person logging in is the real person
What should you do to help defend yourself from hackers?
Use passwords with more than 6 characters
Use an anti-virus program and keep it updated
Keep your software up to date
Use different passwords for each website you use
Tell someone else your password in case you forget it
What are the aims of a phishing e-mail?
Trick you into thinking it is from an official source
Get you to click on a link without thinking
Find out your address
Deactivate your anti-virus
How can you spot a phishing e-mail?
Correct spelling
Seems too good to be true
The From address does not match the sender
The To field is empty
How can you spot a phishing e-mail?
Incorrect spelling
The message is designed to make you panic and act quickly
There is no personal information included in the e-mail
They mention your e-mail address in the message
What is Malware?
Software that does bad things to your computer
Software that keeps your computer safe
This type of malware spreads by itself over a computer network, sometimes for quite a while without anyone noticing.
Virus
Trojan
Worm
This type of malware disguises itself as something legitimate so you download and run it without realising.
Virus
Trojan
Worm
This type of malware spreads through human interaction i.e. someone has to click it or download it.
Virus
Trojan
Worm
How can you remove malware from your computer?
Ant-malware software
Word processor
Encryption
Firewall
Malware spreads through the computer network at school and infects all the connected machines. Before anyone realises, it's too late.
Virus
Trojan
Worm
Billy downloads a program to get him free Fortnite skins and it actually steals his login instead.
Virus
Trojan
Worm
Faye clicks a link to download a program that then wipes all the data on her computer
Virus
Trojan
Worm
