Font size
WorksheetsCybersecurity Practice
Total questions: 67
Worksheet time: 38mins
What is the biggest cyber security threat?
The human factor
Malware of any kind
Unencrypted communication
Theft of mobile devices
What measures can be taken to minimize the attack surface for social engineering?
Use of password managers
Encryption of all communication and data
Work exclusively in a secure environment
Minimizing the communication of personal information
What are the consequences of a virus?
It is destroying your screen.
It opens your e-mail account
It deletes/copies data
It will help you work.
Generic term for all methods used to spy on passwords.
Cyber Grooming
Information Diving
Phishing
Clustering
Someone's trying to gain access to a computer network.
Cyber Grooming
Information Diving
Pretexting
Hacking
What is the primary goal of network security?
To ensure compliance with industry regulations.
To protect data and resources from unauthorized access and attacks.
To monitor user activity on the network.
To enhance network speed and performance.
What is the best way to prevent malware infections?
Disable firewall settings
Only use free software
Regularly update software and use antivirus protection.
Ignore software updates
How can you identify a phishing email?
Check for suspicious sender addresses, generic greetings, urgent language, unexpected attachments or links, and poor spelling or grammar.
Check for high-resolution images and logos.
Look for personalized greetings and detailed information.
Verify the sender's phone number in the email.
What is the purpose of data encryption?
The purpose of data encryption is to protect sensitive information from unauthorized access.
To create backups of data.
To enhance data storage capacity.
To improve data processing speed.
What does the acronym 'CIA' stand for in cybersecurity?
Control, Integrity, Access
Confidentiality, Identity, Accountability
Confidentiality, Integrity, Authentication
Confidentiality, Integrity, Availability
What is a firewall used for?
A firewall is used to protect networks by controlling traffic and preventing unauthorized access.
To store data securely in the cloud.
To enhance internet speed by boosting bandwidth.
To manage user passwords and authentication.
What is social engineering in the context of cybersecurity?
A method to enhance network security by training employees.
A technique for encrypting sensitive data during transmission.
A process of installing software updates to prevent breaches.
Social engineering is the manipulation of individuals to obtain confidential information for fraudulent purposes.
What is two-factor authentication?
Two-factor authentication is a security measure that requires two forms of identification to access an account.
A single password for all accounts
A way to encrypt your data
A method to reset your password
What is the main goal of a DDoS (Distributed Denial of Service) attack?
To steal sensitive data from a computer .
To overload a network or website with traffic, making it unavailable to users.
To gain unauthorized access to a computer system.
To spread malware to multiple devices.
What does the acronym "VPN" stand for in the context of cybersecurity?
Virtual Private Network.
Very Personal Network.
Virtual Public Network
Visual Private Network
Encryption is the process of converting data into a code to prevent unauthorized access, and it can be used to protect data both at rest and in transit.
True
False
What is a cyber attack?
an attempt by hackers to damage or destroy a computer network or system.
when someone shoots your computer
an attack on cybers
when someone robs an atm machine
What is ransomware?
A type of threat that holds onto your computer until you pay your fines
When someone tells you what you have to wear
a type of malicious software designed to block access to a computer system until a sum of money is paid.
What is a computer virus?
When a hacker breaks into your computer system
A sickness that your computer can pas on to you
When your computer is infected with the flu
a piece of code which is capable of copying itself and typically has a detrimental effect, such as corrupting the system or destroying data.
A malicious file that can attach to other files and replicate when the user shares the file.
Virus
Worm
Trojan
DDOS
The word "malware" comes from the term?
Malfunction Software
Malicious Software
Malcontent Software
Maltreated Software
Is this a legitimate email?
True
False
What is spyware??
When your kids use your phone
James Bond's movie
Software that collects data from computer
a cyber criminal
Which of the following is a phishing email??
You have won a lottery!! Follow this link to claim it!!
Your bank account has been compromised. Login here to protect yourself.
Help.I am stuck aboard and urgently need money transferred to me to get home.
All of the above. Be careful.
The implementation of which security method has the greatest positive influence on security?
Mature Identity & Access Management
Implementation of strong password guidelines & password management
Application of Secure Coding Methods
Holistic People Powered Security in the organisation
Which password is most secure?
LO4ndon7
#fr41963§
%27T#wbZ3
LondonattheThames2019
What are the consequences of a virus?
It is destroying your screen.
It opens your e-mail account
It deletes/copies data
It will help you work.
Someone's trying to gain access to a computer network.
Cyber Grooming
Information Diving
Pretexting
Hacking
A Trojan stores a file on my hard drive that redirects me to fake websites.
Cyber Grooming
Phishing
Pharming
Pretexting
What information do cookies store?
You remember the search history, what you looked at and with which email you registered.
What make cookies possible?
They make it possible to monitor and control a user
Store data of your passwords
In cybersecurity, what does CIA stand for?
Confidentiality, Integrity, Availability
Central Intelligence Agency
Cybersecurity Investigation Agency
Cybersecurity, Internet, Accessibility
What does confidentiality of data refer to?
What does integrity of data refer to?
What does availability of data refer to?
Why is it important to maintain the integrity of data like grades?
What is dumpster diving?
Searching through trash to find sensitive information
Monitoring telephone conversations
Intercepting network traffic
Manipulating individuals to reveal information
What is the primary focus of eavesdropping attacks?
Gaining physical access to systems
Listening to private conversations
Manipulating individuals
Destroying data
What is a hardware failure?
An attacker intercepting network traffic
Physical components of a system malfunctioning
An employee increasing their own salary in the payroll system
A phishing email
Which of the following is a method to protect against unauthorized modification of information?
Using antivirus software
Following the principle of least privilege
Installing a firewall
Encrypting data
What does the "A" in the CIA triangle stand for?
Availability
Authentication
Authorization
Accuracy
What is an impersonation attack?
Intercepting network traffic
Pretending to be someone else to gain unauthorized access
Modifying data without permission
Observing a legitimate user logging into a system
How can organizations protect against power outages?
Using encryption
Implementing redundant power sources and backup generators
Shredding documents
Educating users about phishing
What can cause power outages?
Increased demand on the power grid
Social engineering attacks
Unauthorized modification of information
Man-in-the-middle attacks
What is a man-in-the-middle attack?
Intercepting and altering communication between two parties
Physically damaging devices
Searching through trash
Manipulating individuals
How can organizations best defend against impersonation attacks?
Using encryption
Educating users about security
Shredding documents
Implementing firewalls
What is a denial of service (DoS) attack?
Physically damaging devices
Bombarding a system with an overwhelming amount of traffic
Intercepting network communications
Manipulating individuals
How can organizations protect against dumpster diving?
Using encryption
Shredding documents before discarding them
Implementing firewalls
Educating users about phishing
Which term refers to a hidden method of bypassing normal authentication in a computer system?
Backdoor
Rootkit
Logic Bomb
Trojan
Which type of malware is designed to provide unauthorized access to a user's computer?
Ransomware
RAT - Remote Access Trojan
Adware
SPAM
What is the term for software that encrypts files and demands payment for decryption?
Ransomware
Adware
SPAM
PUP
What is a type of malware that hides its presence on a computer?
Rootkit
Spyware
Logic Bomb
PUP
Which term refers to unwanted or unsolicited messages sent over the internet?
SPAM
Adware
PUP
RAT
What is the term for a prolonged cyberattack that aims to steal data or monitor systems over time?
APT - Advanced Persistent Threat
BOTNET
SPAM
Zero Day
Which malware held the title for most widely spread in 2017?
WannaCry Worm
Brain Virus
Trojan Horse
Backdoor Botnet
A group of compromised computers that have software installed by a
worm or Trojan is known as which of the following?
Botnet
Rootkit
Virus
Zombie
Which type of attack uses more than one computer?
Virus
Worm
DoS
DDos
Which type of malware does not require a user to execute a program to
distribute the software?
Worm
Virus
Trojan Horse
Stealth
How do most network-based viruses spread?
Optical Disk
USB Drive
Instant Messages
Which of the following defines the difference between a Trojan horse and
a worm?
Worms self-replicate but Trojan horses do not.
The two are the same.
Worms are sent via e-mail; Trojan horses are not.
Trojan horses are malicious attacks; worms are not.
How can a cybersecurity breach cause reputational damage to an organization?
By increasing profits
By leaking sensitive customer information
By improving market share
By enhancing brand loyalty
Which security standard is designed to protect credit card data and prevent fraud in payment card transactions?
Sarbanes-Oxley Act (SOX)
Payment Card Industry Data Security Standard (PCI DSS)
Gramm-Leach-Bliley Act (GLBA)
Federal Financial Institutions Examination Council (FFIEC)
Which security protocol allows third-party applications to access user data without exposing credentials?
Multi-Factor Authentication (MFA)
Google Authenticator
Microsoft Authenticator
Open Authorization (OAuth)
What does the abbreviation "VPN" stand for?
Virtual Privacy Network
Virtual Private Network
Verified Private Network
Virtual Protocol Network
Which cyber law in the United States deals with protecting personal health information?
HIPAA
FERPA
DMCA
COPPA
What does GDPR stand for?
General Data Protection Regulation
Global Data Privacy Rule
Government Data Privacy Regulation
General Digital Protection Rule
What does the term "zero-day vulnerability" refer to?
A vulnerability that is difficult to exploit
A vulnerability that has been fixed
A vulnerability that is publicly disclosed before a patch is available
A vulnerability in a new system
Which cybersecurity framework is widely adopted in the U.S. and outlines a comprehensive approach to managing and reducing cybersecurity risks?
ISO 27001
NIST Cybersecurity Framework
CIS Controls
COBIT
