NEW
Font size
WorksheetsCybersecurity Fundamentals for Beginners
Total questions: 20
Worksheet time: 10mins
What is the primary goal of cybersecurity?
To protect systems and data from cyber threats.
To enhance user experience on websites.
To increase the speed of internet connections.
To promote social media engagement.
Name three common types of cyber threats.
spyware
ransomware
malware, phishing, denial-of-service
social engineering
What does VAPT stand for in cybersecurity?
Vulnerability Assessment and Penetration Testing
Virtual Application and Protection Testing
Vulnerability Analysis and Prevention Techniques
Verification and Assessment of Penetration Tools
What is a vulnerability assessment?
A vulnerability assessment is a method to enhance software performance.
A vulnerability assessment is a strategy for increasing user engagement.
A vulnerability assessment is a process to identify and evaluate security weaknesses in systems or networks.
A vulnerability assessment is a tool for managing project timelines.
Describe the difference between a vulnerability and a threat.
A vulnerability is a weakness; a threat is a potential danger.
A vulnerability is a potential danger; a threat is a weakness.
A vulnerability is a type of threat; a threat is a security measure.
A vulnerability is an attack; a threat is a defense.
What is the purpose of penetration testing?
To create software applications.
To perform regular system maintenance.
To monitor network traffic for performance issues.
The purpose of penetration testing is to identify and exploit vulnerabilities in a system to enhance security.
List two common tools used for vulnerability assessments.
Nessus, OpenVAS
Metasploit
Wireshark
Burp Suite
What is social engineering in the context of cybersecurity?
A method to enhance network security by training employees.
Social engineering is the manipulation of individuals to obtain confidential information for fraudulent purposes.
A process of installing software updates to prevent breaches.
A technique for encrypting sensitive data during transmission.
What is the role of firewalls in network security?
Firewalls protect networks by monitoring and controlling traffic based on security rules.
Firewalls are primarily for physical security of hardware.
Firewalls are used to increase internet speed.
Firewalls only encrypt data during transmission.
Explain the concept of 'defense in depth'.
A reactive approach that addresses threats after they occur.
A method that focuses solely on employee training for security.
A single-layer security strategy that relies on firewalls only.
Defense in depth is a multi-layered security approach that uses various defensive measures to protect assets.
What is the first step in an incident response plan?
Detection
Eradication
Preparation
Containment
What does the term 'phishing' refer to?
A technique for improving email delivery rates.
Phishing refers to a fraudulent attempt to obtain sensitive information by pretending to be a trustworthy source.
A method to securely share passwords online.
A type of software for data encryption.
What is the importance of regular software updates?
Software updates can slow down your device.
Regular software updates are only for new features.
Regular updates are unnecessary for most users.
Regular software updates are important for security, performance, and functionality.
Name one best practice for creating strong passwords.
Use your birthdate as your password.
Change your password every month without any other precautions.
Use a mix of letters, numbers, and symbols in a long password.
Use only lowercase letters in your password.
What is malware and how does it affect systems?
Malware is a security feature that protects systems from attacks.
Malware is a type of hardware that improves system performance.
Malware is software that only affects mobile devices.
Malware is malicious software that damages or disrupts systems.
What is the significance of encryption in data security?
Encryption slows down data processing significantly.
Encryption is crucial for safeguarding data confidentiality and integrity.
Encryption is only used for password protection.
Encryption is unnecessary for internal data transfers.
Describe the process of risk assessment in cybersecurity.
The process of risk assessment in cybersecurity includes identifying assets, evaluating threats and vulnerabilities, analyzing impact and likelihood, and prioritizing risks.
Conducting a security audit
Implementing a firewall
Training employees on password policies
What are the key components of an incident response team?
Software developers
Network engineers
Team leader, incident handlers, forensic analysts, communication specialists, legal advisors
System administrators
What is the purpose of security awareness training?
To train employees on physical fitness
The purpose of security awareness training is to educate employees about security threats and best practices.
To improve team communication skills
To enhance customer service techniques
How can organizations protect against DDoS attacks?
Implement DDoS protection services, increase bandwidth, use firewalls, deploy load balancers, and have an incident response plan.
Ignore network traffic
Increase server downtime
Reduce security measures
