Font size
WorksheetsTeach Cyber Mod 1.1 What is Cybersecurity?
Total questions: 16
Worksheet time: 8mins
Which two factors contributed to the lack of security controls built into the predecessor to the Internet, Arpanet? Select two answers.
Arpanet was a research project with the goal of sharing information among a relatively small number of computers.
Arpanet was only accessible to military personnel on a few military installations.
Arpanet had a technological limit of 300 miles between terminals.
Arpanet used a circuit switching technology, which did not require security controls.
Arpanet’s scientists and researchers were motivated by simply making the system work.
Which statement describes the relationship between the Internet, the Web, and Cyberspace?
The Internet is a national network, the Web is a global network, and Cyberspace is a virtual network.
The Internet was preceded by development of the Web. Cyberspace refers to the international boundaries of the Internet.
The Internet refers to the network of networks, the Web refers to content accessed by a browser, and Cyberspace encompasses the information environment.
The Internet refers to the global network, the Web refers to the visual aspect of information, and Cyberspace includes satellites and submarine cables.
How does the actual location of a data center impact access and control of the information stored in it? Select two answers.
Government policies on cyber sovereignty affect the rules governing the free flow of information and access to content.
There are no laws governing the location of data centers and their operation.
The United Nations determines the access to and control of information in data centers.
The country in which the data center is located has complete control of the data.
Data protection laws can extend beyond national borders.
Select two true statements about the Stuxnet attack.
Stuxnet was able to attack a system that was not connected to the Internet.
Stuxnet was the first cyberattack known to cause physical damage to a system.
Stuxnet was malware that created a botnet of infected IoT devices.
Stuxnet was the largest data breach in history.
Which statement explains one of the challenges of cyberwarfare?
Attribution is difficult due to the ability to hide and change locations, and mask identities.
Cyber sovereignty creates borders in cyberspace.
Physical borders provide protection in cyberwarfare.
Increased connectivity has resulted in international arrangements for global cyber practices.
What security controls ensure confidentiality?
Identification, authentication, and authorization
Identification and file hashing
Authorization and redundancy
Authentication and fault tolerance
A bank ATM requires the use of a bank card and a PIN to conduct a transaction. If a bank card is lost or stolen, what two additional security measures ensure prevention and detection?
Multiple failed PIN attempts can block the card.
The ATM security camera provides authorization.
PIN changes require identification and authentication.
Place a freeze on the credit report.
Contact the police.
Victims of WannaCry ransomware were either locked out of their computers or unable to access their files. Which principle(s) of information security were violated in this attack?
Confidentiality
Integrity
Availability
Confidentiality and Integrity
A business traveler uses a computer in a hotel business center to access a personal email account. A hidden keylogger (malware) is installed on the computer. Later in the evening the business traveler attempts to again access the personal email account and realizes she is locked out of her account. Which principle(s) of the CIA Triad have been violated?
Loss of confidentiality and availability
Loss of integrity and availability
Loss of availability
Loss of confidentiality
A student is unsure of whether a game executable file is safe to download from a website. Which security measure, if available on the website, would verify that the downloaded file is legitimate?
Hash-based verification
Identification and authentication
Authorization
Access control
Due to a hacking attempt of the school’s data management system, the IT Director disables access to the gradebook from outside of the school building. Which principle(s) of information security have been impacted by this decision?
Loss of Availability
Loss of Integrity
Loss of Confidentiality
Loss of Integrity and Availability
What two factors have influenced the rapid adoption of IoT devices and thus increased the attack surface? Select two answers.
The open architecture of the Internet
The management of the built-in security features
The convenience of IoT devices
The complicated security controls required
The lack of international borders
Which statement describes one of the lessons learned from the Mirai Botnet?
Convenience and usability of many IoT devices is a tradeoff for privacy and security.
Securing IoT devices is the sole responsibility of the manufacturer of the device.
IoT devices should not communicate with other networked devices.
Privacy and security are mutually exclusive goals in cybersecurity.
Which two items are benefits of IoT devices?
Connectivity provides easier access to information
Increased connectivity and fewer security vulnerabilities
Convenience and saving time through automation
Standard security features provided by manufacturers
A programmer discovers that Personally Identifiable Information (PII) is collected from his application and is being shared with a third-party vendor in violation of the terms of use of the software. What ethical obligation does the programmer have in this case?
The programmer has an obligation to do no harm. He should change the terms of use to acknowledge the sharing of data before anyone notices.
The programmer has an obligation to respect privacy. Personal information gathered for a specific purpose should not be used for other purposes without the person’s consent.
The programmer has an obligation to honesty. He should report what is happening on social media to warn users of this privacy violation.
The programmer has an obligation to confidentiality. He should not tell anyone about the incident.
Within a complex system, an agent that learns and adapts over time is also called:
An adversary
An assumption
Emergent Behavior
System analysis
