1.6

Question 1

Weaknesses or security flaws present in cloud computing environments, services, or applications. _____________ may arise due to misconfigurations, insecure APIs, inadequate access controls, or vulnerabilities in underlying infrastructure, potentially exposing sensitive data or resources to unauthorized access or exploitation.

Answer 1

Cloud-based vulnerabilities

Question 2

Pertain to weaknesses or security flaws in locally hosted systems, networks, or applications within an organization’s physical premises.

Answer 2

On-premises
vulnerabilities

Question 3

Is a cyber-attack that exploits a previously unknown vulnerability or software flaw for which no patch or fix is available from the software vendor.

Answer 3

Zero-day attack

Question 4

Refers to the network of entities, vendors, suppliers, and partners involved in the development, manufacturing, distribution, and delivery of products and services within an organization’s ecosystem. Risks arise when vulnerabilities in this chain are exploited by attackers.

Answer 4

Supply chain

Question 5

Are outdated technology systems, applications, or software that are still in use within an organization.

Answer 5

Legacy platforms

Question 6

The unintentional loss of data, resulting in its permanent or temporary unavailability or inability to be accessed.

Answer 6

Data loss

Question 7

A ______________ occurs when unauthorized individuals gain access to sensitive information without authorization. ____________ may involve the theft, exposure, or unauthorized disclosure of personal, financial, or proprietary data, potentially leading to identity theft, financial fraud, reputational damage, and regulatory penalties for organizations.

Answer 7

Data breaches

Question 8

_________________ refers to the unauthorized extraction of sensitive data from an organization’s systems to an external location controlled by attackers.

Answer 8

Data exfiltration

Question 9

Is a type of cybercrime in which attackers steal and misuse individuals’ personal information for fraudulent purposes.

Answer 9

Identity theft

Question 10

Refers to the disruption of access to data, systems, or services, rendering them unavailable to authorized users. This leads to downtime, productivity losses, and negative impacts on business operations.

Answer 10

Availability loss