{{asɛmtiNe Ɔkyerɛwfo}} | Nhomakorabea | Nneɛma a ɛma wotumi yɛ ade

1

An employee’s laptop containing sensitive company files is stolen. The attacker is able to immediately open and read the files on the device. What is the most likely reason this was possible?

The attacker guessed the employee’s password

The files were stored in a shared folder

The files were not encrypted

The employee had administrative privileges

1

A company allows all employees to have administrator access on their computers. An attacker gains access to one employee’s account through a phishing email. What is the biggest risk to the organization?

The attacker can only view files created by that employee

The attacker can control system settings and access most files on the system

The attacker can only send emails from the employee’s account

The attacker cannot make any permanent changes to the system

1

A shared folder in a company is configured so that all employees can view and edit its contents. What vulnerability does this represent?

Unencrypted files

Weak access control settings

Malware infection

Phishing attack

1

A company encrypts all sensitive files stored on employee laptops. What is the primary benefit of this practice?

It prevents unauthorized users from reading the files if the device is accessed

It removes the need for passwords

It allows more users to access the files easily

It allows files to be edited more quickly

1

An attacker gains physical access to a USB drive containing company data. Under which condition would the attacker be able to read the files most easily?

If the USB drive requires a password to access

If the files are not encrypted

If the files are large in size

If the files are stored in a hidden folder

1

A company limits administrative privileges to only a few IT staff members. Why is this considered a good security practice?

It allows all users to install software freely

It reduces the risk of attackers gaining elevated access if an account is compromised

It prevents employees from accessing their own files

It makes systems easier to use for all employees

1

An attacker modifies important application files stored in a shared folder, causing the application to stop working. Which vulnerability is most likely being exploited?

Unencrypted files

Weak access control settings

Strong authentication

Administrative privileges

1

A user with administrative privileges accidentally installs malicious software. What makes this situation particularly dangerous?

The software can make system-wide changes and access sensitive data

The software will only affect that one file

The software cannot run without permission

The software will automatically be deleted

1

A company stores sensitive files on a server. Only specific employees are given permission to view or edit those files. What security concept is being applied?

Administrative control

Data backup

Encryption

Access control

1

An attacker gains access to a standard (non-admin) user account on a system. What can the attacker typically do?

Control all system settings and users

Disable all security protections

Install any software without restriction

Access only the files and permissions available to that user

1

A company gives all employees access to edit files in a shared financial folder to improve collaboration. What is the main risk of this decision?

Files will be automatically encrypted

The system will run more slowly

Employees will not be able to access files

Unauthorized or accidental changes could be made to important data

1

An attacker steals a company laptop but cannot read any of the files stored on it. What is the most likely explanation?

The files are encrypted

The files were stored in a shared folder

The attacker does not know how to use the laptop

The laptop is turned off

1

A company wants to reduce the risk of attackers gaining full control of systems. Which action would be most effective?

Allow all users to share files freely

Limit administrative privileges to only necessary users

Store all files on USB drives

Remove all access controls

1

An employee’s account is compromised, and the attacker is able to install software and disable antivirus protections. What does this indicate about the account?

It had administrative privileges

It was protected by encryption

It had limited file access

It was a guest account

1

A company notices that many employees can access files unrelated to their job roles. What type of vulnerability does this indicate?

Unencrypted files

Weak access control settings

Administrative privileges

Network failure

AP Cybersecurity: 5.1B - Check for Understanding Questions

AP Cybersecurity: 5.1B - Check for Understanding Questions

An employee’s laptop containing sensitive company files is stolen. The attacker is able to immediately open and read the files on the device. What is the most likely reason this was possible?

A company allows all employees to have administrator access on their computers. An attacker gains access to one employee’s account through a phishing email. What is the biggest risk to the organization?

A shared folder in a company is configured so that all employees can view and edit its contents. What vulnerability does this represent?

A company encrypts all sensitive files stored on employee laptops. What is the primary benefit of this practice?

An attacker gains physical access to a USB drive containing company data. Under which condition would the attacker be able to read the files most easily?

A company limits administrative privileges to only a few IT staff members. Why is this considered a good security practice?

An attacker modifies important application files stored in a shared folder, causing the application to stop working. Which vulnerability is most likely being exploited?

A user with administrative privileges accidentally installs malicious software. What makes this situation particularly dangerous?

A company stores sensitive files on a server. Only specific employees are given permission to view or edit those files. What security concept is being applied?

An attacker gains access to a standard (non-admin) user account on a system. What can the attacker typically do?

A company gives all employees access to edit files in a shared financial folder to improve collaboration. What is the main risk of this decision?

An attacker steals a company laptop but cannot read any of the files stored on it. What is the most likely explanation?

A company wants to reduce the risk of attackers gaining full control of systems. Which action would be most effective?

An employee’s account is compromised, and the attacker is able to install software and disable antivirus protections. What does this indicate about the account?

A company notices that many employees can access files unrelated to their job roles. What type of vulnerability does this indicate?

An employee’s laptop containing sensitive company files is stolen. The attacker is able to immediately open and read the files on the device. What is the most likely reason this was possible?

A company allows all employees to have administrator access on their computers. An attacker gains access to one employee’s account through a phishing email. What is the biggest risk to the organization?

A shared folder in a company is configured so that all employees can view and edit its contents. What vulnerability does this represent?

A company encrypts all sensitive files stored on employee laptops. What is the primary benefit of this practice?

An attacker gains physical access to a USB drive containing company data. Under which condition would the attacker be able to read the files most easily?

A company limits administrative privileges to only a few IT staff members. Why is this considered a good security practice?

An attacker modifies important application files stored in a shared folder, causing the application to stop working. Which vulnerability is most likely being exploited?

A user with administrative privileges accidentally installs malicious software. What makes this situation particularly dangerous?

A company stores sensitive files on a server. Only specific employees are given permission to view or edit those files. What security concept is being applied?

An attacker gains access to a standard (non-admin) user account on a system. What can the attacker typically do?

A company gives all employees access to edit files in a shared financial folder to improve collaboration. What is the main risk of this decision?

An attacker steals a company laptop but cannot read any of the files stored on it. What is the most likely explanation?

A company wants to reduce the risk of attackers gaining full control of systems. Which action would be most effective?

An employee’s account is compromised, and the attacker is able to install software and disable antivirus protections. What does this indicate about the account?

A company notices that many employees can access files unrelated to their job roles. What type of vulnerability does this indicate?