Fundamentals Of Cybersecurity

Question 1

What is cybersecurity?

Answer 1

Cybersecurity is a series of processes, practices and technologies that protect networks, computers, software and data from damage, loss and unauthorised access

Question 2

What is social engineering?

Answer 2

Forms of cyberattack that focus on people, rather than pieces of technology, as the weak point in any system. Different ways to manipulate people

Question 3

What are the 4 different forms of social engineering?

Answer 3

Blagging, Shouldering, Pharming, Phishing

Question 4

How does blagging work?

Answer 4

Fabricating a scenario in order to gain unauthorised access to a system. IT Support

Question 5

How does shouldering work?

Answer 5

Watching over someone’s shoulder as they type in their password

Question 6

How does pharming work?

Answer 6

Redirecting users to an unsafe website by users own mistake to collect the user’s login credentials

Question 7

How does phishing work?

Answer 7

Emails lure people to convincing but fake website pages where they transmit login details to an unknown person

Question 8

What is malware?

Answer 8

Any program that works against the interests of you or your computer

Question 9

What are examples of malware?

Answer 9

Computer viruses, Trojans, Adware, Spyware

Question 10

What are other threats to users?

Answer 10

Weak passwords, Misconfigured Access Rights, Removable Media, Unpatched Software

Question 11

What are methods used to detect and prevent cyberattacks?

Answer 11

Biometric measures, password systems, CAPTCHA, Email Confirmation, Automatic Software Updates, Penetration Testing

Question 12

What are computer viruses?

Answer 12

Self-replicating pieces of code that can damage data or software. They are often spread via attachments

Question 13

What are Trojans?

Answer 13

Trojans are legitimate programs developed with the intention of hiding malicious code within

Question 14

What is adware?

Answer 14

Adware are downloads of unwanted Internet adverts often observing online behaviour to target specific adverts

Question 15

What is spyware?

Answer 15

Spyware obtains sensitive data and transmits the data to a hacker across the Internet

Question 16

How are weak passwords a threat?

Answer 16

Passwords that are easy to guess and default passwords can leave data vulnerable.

Question 17

What are the threats of misconfigured access rights?

Answer 17

Access rights are rules that tell a computer system which user should have access to which files and other resources. If the rights are not set properly, incorrect access may be granted

Question 18

What are the threats of removable media?

Answer 18

Any storage device that is highly portable can easily be used to steal data or introduce malware onto a system

Question 19

What are the threats of unpatched software?

Answer 19

When a security risk is identified in a program, the developer will release a patch. If the user does not install the patch, the computer will not be secure

Question 20

What is the role of biometric measures?

Answer 20

Using some part of a person’s biology to access a system instead of a password

Question 21

What are the role of password systems?

Answer 21

Automated procedures that ensure that sound password policies are followed. Users that do not adhere to policies are not let into the system

Question 22

What is the role of CAPTCHA?

Answer 22

Blurry text is presented to the reader which is human readable but difficult for a computer. This technology is used to ensure that a human is using the system

Question 23

What is the role of email confirmation?

Answer 23

Often when a password is changed, a user must verify this change by clicking a link sent to a registered email. This prevents third parties from changing passwords

Question 24

What is the role of automatic software updates?

Answer 24

When a new version of software is released, a computer can be configured to automatically download it so as to have updated security measures

Question 25

What is the role of penetration testing?

Answer 25

Someone tries to hack into a system working under the employer to identify weaknesses so that they can be resolved