🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 27 (10 MCQs)

This set of multiple-choice questions evaluates understanding of the CIA triad (confidentiality, integrity, availability), information security principles, and cyber security basics. It covers topics such as hacking legislation, unauthorized access, insider threats, and secure practices like multi-factor authentication and password security. The questions assess knowledge of key concepts and the ability to identify appropriate security measures.

Quiz Instructions

Select an option to see the correct answer instantly.

1. Which of these authentication methods is most secure? (1-4)

Correct Answer: Correct answer is: (D) Physical and Code.

Exam Relevance: CISSP, CompTIA Security+, CISM

Difficulty: Moderate

Concept notes: In cyber security, multi-factor authentication (MFA) is considered more secure than single-factor authentication. Multi-factor authentication requires two or more verification methods to confirm a user's identity, making it harder for unauthorized individuals to gain access.

Common Mistakes: A common mistake is to assume that a password alone or a combination of a password and username is sufficient for secure authentication. However, these methods are less secure compared to multi-factor authentication.

Explanations: Multi-factor authentication (MFA) enhances security by requiring multiple forms of verification. In this case, a physical token (such as a key card) and a code (such as a PIN or a one-time password) are used together. This combination makes it significantly more difficult for an attacker to gain unauthorized access, as they would need both the physical token and the code.

Option Analysis:

Option A: A password alone is a single-factor authentication method, which is less secure because it can be guessed, stolen, or compromised.
Option B: A password and username combination is still a single-factor authentication method, as both pieces of information can be obtained or guessed.
Option C: A key card is a physical token, which is a form of multi-factor authentication if used with another factor, but on its own, it is not as secure as combining it with a code.
Option D: A physical token (such as a key card) combined with a code (such as a PIN or a one-time password) is a multi-factor authentication method, which is more secure than any single-factor method.

2. What is the most important security model?

Correct Answer: Correct answer is: (A) CIA.

Exam Relevance: CISSP, CompTIA Security+, CISM

Difficulty: Moderate

Concept notes: The CIA triad is a model that describes the three main components of information security: Confidentiality, Integrity, and Availability.

Common Mistakes: A common misunderstanding is that the CIA triad refers to the Central Intelligence Agency, which is unrelated to the security model.

Explanations: The CIA triad is the most important security model in cyber security because it provides a comprehensive framework for protecting information. Confidentiality ensures that data is accessible only to those authorized to have access. Integrity ensures that data is accurate and has not been tampered with. Availability ensures that data is accessible to authorized users when needed. Together, these three components form the foundation of information security.

Option Analysis:

Option A: CIA is the correct answer as it represents the Confidentiality, Integrity, and Availability model.
Option B: FBI stands for Federal Bureau of Investigation, which is a law enforcement agency and not a security model.
Option C: NSA stands for National Security Agency, which is a government agency and not a security model.
Option D: SUT is not a recognized acronym in the context of security models.

Mnemonic: CIA: Confidentiality, Integrity, Availability

3. Which legislation governs the act of hacking? (1-4)

Correct Answer: Correct answer is: (D) The Computer Misuse Act.

Exam Relevance: CISSP, CISM, CompTIA Security+

Difficulty: Easy

Concept notes: The Computer Misuse Act is the legislation that governs the act of hacking in the UK.

Common Mistakes: A common misunderstanding is that other acts like the Data Protection Act or Freedom of Information Act might cover hacking, but they do not.

Explanations: The Computer Misuse Act is specifically designed to address unauthorized access to computer systems, which is the core definition of hacking. This act provides legal frameworks and penalties for various forms of unauthorized computer access and misuse.

Option Analysis:

Option A: The Freedom of Information Act is related to the right to access information held by public authorities, not to hacking.
Option B: The Data Protection Act is concerned with the protection of personal data and privacy, not with the act of hacking.
Option C: The Creative Commons License is related to copyright and the sharing of creative works, not to hacking.
Option D: The Computer Misuse Act is the correct legislation that governs hacking activities.

4. Hardware or software designed to guard against unauthorized access to a computer network is known as .....

Correct Answer: Correct answer is: (A) Firewall.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A firewall is a hardware or software system designed to prevent unauthorized access to or from a private network.

Common Mistakes: A common misunderstanding is that a hacker-resistant server alone can provide comprehensive network security. However, a firewall is specifically designed to monitor and control incoming and outgoing network traffic based on predetermined security rules.

Explanations: A firewall is the correct answer because it is specifically designed to guard against unauthorized access to a computer network. It monitors and controls network traffic based on security rules, thereby providing a barrier between trusted and untrusted networks.

Option Analysis:

Option A: Correct. A firewall is designed to guard against unauthorized access to a computer network.
Option B: Incorrect. A hacker-resistant server is not a specific term and does not encompass the functionality of a firewall.
Option C: Incorrect. Not all options are correct; only the firewall is designed to guard against unauthorized access.
Option D: Incorrect. There is a correct option among the choices provided.

5. What option does not contain a security risk?

Correct Answer: Correct answer is: (C) A new unconfigured router that is not connected to the network.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: In cybersecurity, a device that is not connected to any network is isolated and therefore not exposed to external threats.

Common Mistakes: A common misunderstanding is that any device, even if unconnected, could still pose a risk if it is later connected without proper configuration.

Explanations: A new unconfigured router that is not connected to the network is not exposed to any external threats. Since it is not connected, it cannot be accessed by unauthorized users or infected by malware. Therefore, it does not pose a security risk.

Option Analysis:

Option A: A service deployed in the cloud is exposed to the internet and can be targeted by cyber threats.
Option B: Data backed up on a USB drive can be lost, stolen, or accessed by unauthorized users if the drive is not properly secured.
Option C: A new unconfigured router that is not connected to the network is isolated and not exposed to external threats.
Option D: An old hard drive that is about to be scrapped can still contain sensitive data that could be recovered if not properly sanitized.

6. What is NOT considered a strong password?

Correct Answer: Correct answer is: (C) A common word or your name.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A strong password should be difficult to guess and not easily identifiable.

Common Mistakes: A common mistake is using easily guessable information like common words or personal names, which can be easily cracked by attackers.

Explanations: A strong password should be a combination of random characters, numbers, and symbols to make it difficult for attackers to guess. Using common words or personal information like your name makes the password easily guessable and therefore weak.

Option Analysis:

Option A: A random string of characters is considered strong because it is difficult to predict and guess.
Option B: A combination of letters (both uppercase and lowercase) increases the complexity of the password, making it stronger.
Option C: A common word or your name is easily guessable and therefore not considered a strong password.
Option D: Using characters (numbers and letters) and symbols increases the complexity and makes the password stronger.

7. How can individuals protect themselves from credit card fraud?

Correct Answer: Correct answer is: (B) Regularly monitor account statements, set up transaction alerts, use secure websites, be cautious of phishing attempts, keep credit card information secure.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Protecting oneself from credit card fraud involves a combination of proactive monitoring and secure practices.

Common Mistakes: A common mistake is to rely solely on one method, such as monitoring account statements, without implementing other security measures.

Explanations: Regularly monitoring account statements allows individuals to detect unauthorized transactions promptly. Setting up transaction alerts provides real-time notifications of any activity, enabling quick action if necessary. Using secure websites ensures that credit card information is transmitted safely. Being cautious of phishing attempts prevents the accidental disclosure of sensitive information. Keeping credit card information secure minimizes the risk of unauthorized access.

Option Analysis:

Option A: Keeping credit card information written on a piece of paper in the wallet is insecure and increases the risk of fraud if the wallet is lost or stolen.
Option B: This option encompasses a comprehensive set of practices that collectively reduce the risk of credit card fraud.
Option C: Clicking on suspicious links in emails can lead to phishing attacks and compromise credit card information.
Option D: Sharing credit card details on social media is highly insecure and can result in immediate fraud.

8. Namita reads something on the internet that makes her uncomfortable. What should Namita do?

Correct Answer: Correct answer is: (A) Tell a trusted adult about it right away.

Exam Relevance: Cyber Security Awareness Exams, Online Safety Certification

Difficulty: Easy

Concept notes: In cyber security, it is important to report any uncomfortable or suspicious content to a trusted adult immediately. This ensures that the issue can be addressed promptly and appropriately.

Common Mistakes: A common mistake is to keep the information to oneself or to try to handle it alone, which can lead to further complications or exposure to harmful content.

Explanations: Reporting uncomfortable content to a trusted adult is crucial in cyber security. Trusted adults can provide guidance, take necessary actions to mitigate risks, and ensure the safety and well-being of the individual. Keeping such information secret can lead to potential harm and may prevent timely intervention.

Option Analysis:

Option A: This is the correct choice as it aligns with best practices in cyber security for handling uncomfortable content.
Option B: Keeping it a secret is not advisable as it can lead to further exposure to harmful content and prevent timely intervention.
Option C: Asking the person who wrote it to explain themselves can be risky and may not resolve the issue effectively.
Option D: Doing nothing is not a proactive approach and can lead to potential harm and exposure to harmful content.

9. What is unauthorized access in ICT?

Correct Answer: Correct answer is: (B) Entering a computer system without the owner's consent.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Unauthorized access in ICT refers to accessing a computer system, network, or data without proper authorization or permission from the owner or administrator.

Common Mistakes: A common misunderstanding is that unauthorized access only involves hacking or illegal activities. However, it can also include actions like using someone else's login credentials without permission.

Explanations: Unauthorized access is a critical issue in cyber security. It involves gaining entry to a system or network without the owner's consent, which can lead to data breaches, theft, and other security vulnerabilities. The correct answer, "Entering a computer system without the owner's consent," directly aligns with this definition.

Option Analysis:

Option A: Downloading a file with permission is a legal action and does not constitute unauthorized access.
Option B: Entering a computer system without the owner's consent is the correct definition of unauthorized access.
Option C: Changing a password legally does not involve unauthorized access, as it is done with permission.
Option D: Installing a new program is a normal system operation and does not imply unauthorized access.

10. The majority of computer crimes are committed by:

Correct Answer: Correct answer is: (B) Insiders.

Exam Relevance: CISSP, CISM, CompTIA Security+

Difficulty: Moderate

Concept notes: Insiders are individuals who have legitimate access to an organization's systems and data. They can exploit this access to commit computer crimes, often with greater ease and less detection than external attackers.

Common Mistakes: A common misunderstanding is that most computer crimes are committed by external hackers. However, insiders often have more direct access and knowledge of the systems, making them a significant threat.

Explanations: Insiders are considered the majority of computer crime perpetrators because they have legitimate access to the systems and data they exploit. This access makes it easier for them to commit crimes without immediate detection. Insiders can include employees, contractors, or anyone with authorized access to the organization's resources.

Option Analysis:

Option A: Hackers are external attackers who do not have legitimate access to the systems. While they are a significant threat, they are not the majority of computer crime perpetrators.
Option B: Insiders are individuals with legitimate access to the organization's systems and data, making them the majority of computer crime perpetrators.
Option C: Overseas criminals can be a threat, but they are not the majority of computer crime perpetrators. They often operate from a distance and face additional challenges in gaining access.
Option D: Young teenage computer geniuses can be skilled, but they are not the majority of computer crime perpetrators. Most computer crimes are committed by individuals with legitimate access to the systems.

Frequently Asked Questions

What is the CIA triad in the context of cyber security?

The CIA triad stands for confidentiality, integrity, and availability. It is a model designed to guide policies for information security within an organization.

How does multi-factor authentication enhance security?

Multi-factor authentication adds an extra layer of security by requiring multiple forms of verification, such as something you know (password), something you have (physical token), and something you are (biometrics).

What is the purpose of a firewall in network security?

A firewall acts as a barrier between a trusted internal network and untrusted external networks, controlling incoming and outgoing network traffic based on predetermined security rules.

What is the Computer Misuse Act and how does it relate to cyber security?

The Computer Misuse Act is legislation that criminalizes unauthorized access to computer systems and data, helping to protect against hacking and other cybercrimes.

What is an insider threat in the context of cyber security?

An insider threat refers to a security risk posed by individuals with inside access to an organization's systems and data, who may intentionally or unintentionally cause harm.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books