CyberSecurity Fundamentals Final Exam

Last updated 2 months ago

55 Nsɛmmisa

1

Laabri

CyberSecurity Fundamentals Final Exam

Last updated 2 months ago

55 Nsɛmmisa

1

A website uses "HTTPS" instead of "HTTP." What additional security feature does HTTPS provide?

It made the Website load faster.

It encrypts the data transmitted between User's browsers and the Web Server.

It blocks all advertisements on the Website.

It prevents Users from downloading files from the Website.

1

A user installs a Free Game on their computer. Shortly after, they notice their computer is running slowly and sending data without their knowledge. What type of malware has most likely been installed?

Ransomware

Adware

Spyware

Worm

1

Why is it important to regularly update Software and Operating Systems from a Cybersecurity perspective?

Updates add New visual themes and improve the appearance of the Software.

Updates Patch Security vulnerabilities that attackers could exploit.

Updates increase the file size of the Software

Updates allow of Software to run on Older Hardware.

1

Which of the following best explains why using public Wi-Fi without a VPN can be risky?

Public Wi-Fi is always slower than Private Networks.

Public Wi-Fi Networks can be motivated by attackers who may intercept unencrypted data.

Public Wi-Fi automatically installs malware on connected devices.

Public Wi-Fi blocks access to secure Websites.

1

A ransomware attack encrypts all files on a company's server and demands payment for the decryption key. Which cybersecurity principle has been most directly violated?

Confidentiality

Authentication

Availability

Non-repudiation

1

A Social Engineering Attack involves an attacker calling an employee and pretending to be from the IT Department, asking for their password. What is the best term for this specific type of Social Engineering?

Phishing

Vishing

Smishing

Pharming

1

How does a Denial of Service (DoS) attack affect a target system?

It steals sensitive data from Target System.

It installs ransomware on the Target System.

It overwhelms the Target System with traffic, making it unavailable to legitimate Users.

It changes the Login credentials of all Users on the Target System.

1

A School Network Administrator notices unusual spikes in network traffic late at night when no students are present. The traffic appears to be originating from several computers in the Computer Lab and is being sent to an unknown External Server. Using your knowledge of Cybersecurity, what is the most likely explanation, and what should the Administrator do first?

The Computers are running Scheduled Updates, the Administrator should ignore the traffic.

The Computers may be part of a Botnet, sending data to Command-and-Control Server; the

Administrator should isolate the affected from the Network immediately.

A student left their Computer on; the Administrator should simply turn off the Computers.

The Network is experiencing Normal background traffic; no action is needed.

1

A company is designing a new cybersecurity policy. They must choose between two approaches: (1) Allow all network traffic by default and block only known threats, or (2) Block all network traffic by default and allow only verified, necessary traffic. Which approach is more secure and why?

Approach 1 is more secure because it allows employees to work without restrictions.

Approach 2 is more secure because if follows the principle of “default deny,” minimizing the attack surface by only permitting known Safe traffic.

Approach 1 is more secure because blocking all traffic would prevent attackers from entering the Network.

Both approaches are equally secure as long as Antivirus Software is installed.

1

An attacker wants to gain access to a system protected by a password. The attacker uses an automated tool that systematically tries every possible combination of characters until the correct password is found. If a password is 4 characters long and uses only lowercase letters (26 possibilities per character), how many possible combinations must the attacker try in the worst case? Use the formula 26^n where n is the number of characters.

26^2=676

26^3=17,576

26^4=456,976

26^5=11,881,376

1

A Cybersecurity Analyst is reviewing logs and finds that an attacker gained access to a system by exploiting a vulnerability in an outdated web application, then used that access to move to other systems on the network, and finally exfiltrated sensitive data. Which Cybersecurity Strategy, if properly implemented, would have been MOST effective at limiting the attacker's ability to move between systems?

Installing Antivirus Software on all computers.

Network Segmentation, which divides the Network into isolated zones to contain breaches.

Requiring all Users to change their passwords monthly.

Use a stronger Encryption algorithm for stored data.

1

A student is creating a Security plan for their School's Computer Lab. They want to ensure that even if one Security measures fail, other measures will still protect the systems. Which Cybersecurity Principle does this strategy reflect, and which combination of measures best implements it?

The Single Authentication Principle implements only a strong Password policy.

The Defense in Depth Principle implements Firewalls, Antivirus Software, Strong Passwords, and Regular Software Updates together.

The Least Privilege Principle restricts all Users from accessing the Internet.

The Non-repudiation Principle logs all User activity on the Network.

1

An organization discovers that an employee has been sending confidential company data to a personal email account over several months. Which combination of cybersecurity controls, if implemented beforehand, would have been MOST effective at detecting and preventing this insider threat?

Installing stronger Antivirus Software and updating the Operating System regularly.

Implementing Data Loss Prevention (DLP) tools monitoring Outbound Email traffic, and enforcing the Least Privilege Principle.

Requiring Employees to use Two-Factor (2FA) Authentication and stronger passwords.

Encrypting all data stored on Company Servers and using Virtual Private Network (VPN).

1

A Hacker intercepts encrypted communication between two users. Even though the hacker cannot read the messages now, they store the encrypted data hoping that future advances in computing will allow them to decrypt it. What type of threat does this represent, and what is the best long-term defense against it?

This is a Phishing Threat; the Best Defense is to train Users to recognize suspicious emails.

This is a “Harvest Now, Decrypt Later” Threat; the Best Long-term Defense is to adopt Quantum-resistant Encryption algorithms.

This is a Ransomware Threat; the Best Defense is to maintain regular data backups.

This is a Denial-of-Service (DoS) Threat; the Best Defense is to use a Content Delivery Network.

1

A Cybersecurity Team is evaluating the risk of a potential attack on their system. They know that the probability of a successful attack occurring is 1/5 and the potential financial loss if the attack succeeds is $50,000. Using the formula for expected loss: Expected Loss = Probability × Impact, what is the expected financial loss from this threat?

$5,000

$10,000

$25,000

$50,000

1

A School is deciding whether to store student records on a Local Server or in a Cloud-based System. From a Cybersecurity perspective, which of the following represents the most Well-reasoned Analysis of the trade-offs?

A Local Server is always more secure because it is not connected to the Internet and cannot be hacked remotely.

A Cloud-based System is always more secure because Cloud providers have larger Security Teams and more resources than most Schools.

Both options carry risks; a Local Server requires the School to manage its own Security, while a Cloud System depends on the Provider’s Security practices, so the decision should be based on the School’s ability to implement and maintain strong Security controls.

Neither option is secure, so student records should only be stored on paper.

1

A Cybersecurity Analyst notices that a series of failed login attempts are being made on a company's server, each attempt using a slightly different password derived from a list of commonly used passwords. After analyzing the pattern, the analyst determines the attack is automated. Which type of attack is being carried out,
and what is the MOST effective combination of countermeasures to stop it?

A Phishing attack; the best countermeasures are are User Training and Email Filtering.

A Dictionary Attack; the most effective countermeasure include Account Lockout policies and

monitoring for unusual Login activity.

A Brute Force Attack; the countermeasures are strong password policies and Account Lockout mechanisms.

A Social Engineering Attack; the best countermeasures are User Awareness Training and Incident Response plans.

A website uses "HTTPS" instead of "HTTP." What additional security feature does HTTPS provide?

It made the Website load faster.

It encrypts the data transmitted between User's browsers and the Web Server.

It blocks all advertisements on the Website.

It prevents Users from downloading files from the Website.

A user installs a Free Game on their computer. Shortly after, they notice their computer is running slowly and sending data without their knowledge. What type of malware has most likely been installed?

Ransomware

Adware

Spyware

Worm

Why is it important to regularly update Software and Operating Systems from a Cybersecurity perspective?

Updates add New visual themes and improve the appearance of the Software.

Updates Patch Security vulnerabilities that attackers could exploit.

Updates increase the file size of the Software

Updates allow of Software to run on Older Hardware.

Which of the following best explains why using public Wi-Fi without a VPN can be risky?

Public Wi-Fi is always slower than Private Networks.

Public Wi-Fi Networks can be motivated by attackers who may intercept unencrypted data.

Public Wi-Fi automatically installs malware on connected devices.

Public Wi-Fi blocks access to secure Websites.

A ransomware attack encrypts all files on a company's server and demands payment for the decryption key. Which cybersecurity principle has been most directly violated?

Confidentiality

Authentication

Availability

Non-repudiation

A Social Engineering Attack involves an attacker calling an employee and pretending to be from the IT Department, asking for their password. What is the best term for this specific type of Social Engineering?

Phishing

Vishing

Smishing

Pharming

How does a Denial of Service (DoS) attack affect a target system?

It steals sensitive data from Target System.

It installs ransomware on the Target System.

It overwhelms the Target System with traffic, making it unavailable to legitimate Users.

It changes the Login credentials of all Users on the Target System.

A School Network Administrator notices unusual spikes in network traffic late at night when no students are present. The traffic appears to be originating from several computers in the Computer Lab and is being sent to an unknown External Server. Using your knowledge of Cybersecurity, what is the most likely explanation, and what should the Administrator do first?

The Computers are running Scheduled Updates, the Administrator should ignore the traffic.

The Computers may be part of a Botnet, sending data to Command-and-Control Server; the

Administrator should isolate the affected from the Network immediately.

A student left their Computer on; the Administrator should simply turn off the Computers.

The Network is experiencing Normal background traffic; no action is needed.

A company is designing a new cybersecurity policy. They must choose between two approaches: (1) Allow all network traffic by default and block only known threats, or (2) Block all network traffic by default and allow only verified, necessary traffic. Which approach is more secure and why?

Approach 1 is more secure because it allows employees to work without restrictions.

Approach 2 is more secure because if follows the principle of “default deny,” minimizing the attack surface by only permitting known Safe traffic.

Approach 1 is more secure because blocking all traffic would prevent attackers from entering the Network.

Both approaches are equally secure as long as Antivirus Software is installed.

An attacker wants to gain access to a system protected by a password. The attacker uses an automated tool that systematically tries every possible combination of characters until the correct password is found. If a password is 4 characters long and uses only lowercase letters (26 possibilities per character), how many possible combinations must the attacker try in the worst case? Use the formula 26^n where n is the number of characters.

26^2=676

26^3=17,576

26^4=456,976

26^5=11,881,376

A Cybersecurity Analyst is reviewing logs and finds that an attacker gained access to a system by exploiting a vulnerability in an outdated web application, then used that access to move to other systems on the network, and finally exfiltrated sensitive data. Which Cybersecurity Strategy, if properly implemented, would have been MOST effective at limiting the attacker's ability to move between systems?

Installing Antivirus Software on all computers.

Network Segmentation, which divides the Network into isolated zones to contain breaches.

Requiring all Users to change their passwords monthly.

Use a stronger Encryption algorithm for stored data.

A student is creating a Security plan for their School's Computer Lab. They want to ensure that even if one Security measures fail, other measures will still protect the systems. Which Cybersecurity Principle does this strategy reflect, and which combination of measures best implements it?

The Single Authentication Principle implements only a strong Password policy.

The Defense in Depth Principle implements Firewalls, Antivirus Software, Strong Passwords, and Regular Software Updates together.

The Least Privilege Principle restricts all Users from accessing the Internet.

The Non-repudiation Principle logs all User activity on the Network.

An organization discovers that an employee has been sending confidential company data to a personal email account over several months. Which combination of cybersecurity controls, if implemented beforehand, would have been MOST effective at detecting and preventing this insider threat?

Installing stronger Antivirus Software and updating the Operating System regularly.

Implementing Data Loss Prevention (DLP) tools monitoring Outbound Email traffic, and enforcing the Least Privilege Principle.

Requiring Employees to use Two-Factor (2FA) Authentication and stronger passwords.

Encrypting all data stored on Company Servers and using Virtual Private Network (VPN).

A Hacker intercepts encrypted communication between two users. Even though the hacker cannot read the messages now, they store the encrypted data hoping that future advances in computing will allow them to decrypt it. What type of threat does this represent, and what is the best long-term defense against it?

This is a Phishing Threat; the Best Defense is to train Users to recognize suspicious emails.

This is a “Harvest Now, Decrypt Later” Threat; the Best Long-term Defense is to adopt Quantum-resistant Encryption algorithms.

This is a Ransomware Threat; the Best Defense is to maintain regular data backups.

This is a Denial-of-Service (DoS) Threat; the Best Defense is to use a Content Delivery Network.

A Cybersecurity Team is evaluating the risk of a potential attack on their system. They know that the probability of a successful attack occurring is 1/5 and the potential financial loss if the attack succeeds is $50,000. Using the formula for expected loss: Expected Loss = Probability × Impact, what is the expected financial loss from this threat?

$5,000

$10,000

$25,000

$50,000

A School is deciding whether to store student records on a Local Server or in a Cloud-based System. From a Cybersecurity perspective, which of the following represents the most Well-reasoned Analysis of the trade-offs?

A Local Server is always more secure because it is not connected to the Internet and cannot be hacked remotely.

A Cloud-based System is always more secure because Cloud providers have larger Security Teams and more resources than most Schools.

Both options carry risks; a Local Server requires the School to manage its own Security, while a Cloud System depends on the Provider’s Security practices, so the decision should be based on the School’s ability to implement and maintain strong Security controls.

Neither option is secure, so student records should only be stored on paper.

A Cybersecurity Analyst notices that a series of failed login attempts are being made on a company's server, each attempt using a slightly different password derived from a list of commonly used passwords. After analyzing the pattern, the analyst determines the attack is automated. Which type of attack is being carried out,
and what is the MOST effective combination of countermeasures to stop it?

A Phishing attack; the best countermeasures are are User Training and Email Filtering.

A Dictionary Attack; the most effective countermeasure include Account Lockout policies and

monitoring for unusual Login activity.

A Brute Force Attack; the countermeasures are strong password policies and Account Lockout mechanisms.

A Social Engineering Attack; the best countermeasures are User Awareness Training and Incident Response plans.

_____ are like laws within the boundaries of an Organization.

Policies

Ethics

Policies

Procedures

Which of the following is NOT part of the choice of an Organizational Security Architecture?

Spheres of Security

Defense-in-Depth

Levels of Controls

Security Education

Another word or phrase that means "incident candidate" is ______.

Adverse Events

Natural Disaster

System Failure

Contingency

Which of the following is NOT a method for testing Contingency plan?

Full-Interruption Testing

Desk Check

Random Failure Incentive

Structured Walk-Through

Which of following is NOT one of the three general information Security policy categories?

Program-Specific Security Policies

System-Specific Security Policies

Issue-Specific Security Policies

Enterprise Information Security Policies

Privacy of Customer Information may be violated by which of the following?

Release of Personally Identifiable Information to persons without authorization to have it.

Information Aggregation

Use of Technology to intercept communication.

All the above.

InfoSec _______ management is the process of designing, implementing, and managing the use of the collective Data elements (called measurements or metrics) to determine the effectiveness of the overall Security program.

Stability

Functionality

Performance

Change

Overtime, policies and procedures may become inadequate because of _______.

Changes in Agency's mission and Operational requirements, threats, or the environment.

Deterioration in the degree of compliance.

Changes in Technology, Infrastructure, or Business Processes.

All of the above

A Virtual Private Network (VPN) uses Encryption Technology and Security protocols to encrypt traffic transmitted across unsecured Public Networks.

Secure

Reliable

Trusted

Hybrid

Which of there is NOT one of the major categories of Firewall processing modes?

Hybrid Firewall

Packet-Filtering Firewall

Application Layer Proxy Firewall

Demilitarized Zone (DMZ) Firewall

The principle of limiting User Access Privileges to a specific information required to perform their assigned tasks are known as _________.

Need to Know

Minimal Access

Least Privilege

Task Rotation

Security Industry certifications are often used to help filter Applicants for jobs, but suffer which of the following challenges?

Most certifications are very easy to get, so they have limited value.

The certifying Organizations are not well-respected in the Industry.

Many Existing Certifications are relatively New Fully understood by Hiring Organizations.

None of the above.

Scanning and Analysis Tools can be used by Organizations and Attackers for which of the following purposes?

Foot-printing

Operating System Detection

Firewall Analysis

All of the above.

______ are a type of Intrusion Detection and Prevention System (IDPS) focused on protecting Information assets by examining communication traffic.

Network-based Intrusion Detection and Prevention System (NIDPS)

Host-based Intrusion Detection and Prevention System (HIDPS)

App-based Intrusion Detection and Prevention System (IDPS)

None of the above

A Project Manager is an important part of any Information Security Project, as that person is responsible for coordinating activities such as ___________.

Gap Analysis

Project Planning and Tracking

Project Planning and Reporting

All of the above

Which of these is NOT a part of the Organizational Change Model used to support Change Management for Information Security requirements.

Security Training

Unfreezing

Freezing

Moving

The secure Hash function is used in Cryptography to confirm a message's _________.

Identity

Integrity

Independence

Both A & B

HyperText Transfer Protocol Secure (HTTPS) is used to provide which of these functions for Web-based communications.

Confidentiality

Authentication

Neither A or B

Both A & B

A potential weakness in an Asset or its Defensive Control System is called a ___________.

Threat

Risk

Vulnerability

None of the above

The Information Security Project Team should consist of people with what rules and experience?

Risk Assessment Specialist

End Users

Security Professionals

All of the above.

Which group(s) of people are responsible for facilitating the Information Security Program that protects the Organization's ability to function?

Information Technology (IT) Management

General Management

Information Security Management

All of the Above

The process of using Interpersonal Skills to convince people to reveal or access credentials or valuable information to an attacker is known as ___________.

Social Engineering

Social Media

Phishing

Footprinting

Shifting risks to other areas or to outside entities is a Risk Treatment known as ____________.

Movement

Transference

Mitigation

None of the above

The result of this calculation of likelihood of Threat Event (attack) occurrence multiplied by Impact (or consequence), plus or minus an Element (uncertainity) is known as _________.

Annualized Loss Expectancy

Vulnerability

Risk

None of the above

Which of these is often the most valuable asset that the Information Security Organization tries to protect?

Networks

Data

Software

Computers

What does the term "malware" stand for?

Managed Software

Malicious Software

Multiple Layeredease

Manual Software

What is the primary purpose of a Firewall?

To speed up Internet connection

To store data securely

To monitor and control Incoming and Outgoing Network Traffic

To encrypts email

What does "HTTP" stand for?

HyperText Transfer Protocol (HTTP)

High Transfer Tool Protocol

HyperText Transmission Process

Hybrid Text Transfer Protocol

Which of the following is an example of a strong password?

Password123

John1990

T#9kL!2mQz

abcdefgh

What is phishing?

A method of encrypting data

A type of firewall

A fraudulent attempt to obtain sensitive information disquised as a Trustworthy Entity.

A secure way to browse the Internet

What does "VPN" stand for?

Virtual Private Network

Verified Public Node

Virtual Protocol Network

Verified Private Node

Which of the following best describes encryption?

Deleting sensitive files permanently

Converting data into a coded format to prevent unauthorized access.

Scanning a system for viruses

Backing-up data to a Cloud Server

What is two-factor authentication (2FA)?

Use two different browsers to log in

A Security process that requires two forms of verification before granting access.

Having two separate passwords for one account.

Logging in from two different devices simultaneously

Which of the following is NOT a type of malware?

Trojan Horse

Ransomware

Firewall

Spyware

What does "CIA" stand for in the context of CyberSecurity?

Cyber Intelligence Agencyy

Confidentiality, Integrity, and Availability

Computer Information Access

CyberSecurity Infrastructure Architecture

A student receives an email claiming to be from their school asking for their login credentials. The email contains a link to a website that looks identical to the school's official site. Which type of Cyberattack does this scenario best represents?

Ransomware

Denial-of-Service (DoS) Attack

Phishing Attack

Brute Force Attack

A company stores its user passwords as plain text in a database. Why is this considered a poor Cybersecurity practice?

Plain text passwords take up too much storage space.

If the database is breached. All passwords are immediately exposed to attackers

Plain text passwords are harder for Users to remember.

Plain text passwords slow down the Login process.

Which of the following actions best demonstrates the concept of "least privilege" in Cybersecurity?

Giving all employees Full Administrator Access to all Systems.

Allowing Users to access only the data and Systems they need to perform their job.

Restricting Internet access for all employees

Requiring employees to change passwords every day