Cybersecurity Concepts (CYB 201)

Anything connected to or involving the digital or networked environment, including systems, devices, networks, and data.

<p>False (B)</p> Signup and view all the answers

<p>Redundant systems act as backups, ensuring data remains accessible even if a primary system suffers a failure.</p> Signup and view all the answers

<p>Network resilience (D)</p> Signup and view all the answers

<p>RBAC assigns access rights based on user roles within an organization, while MAC uses centralized policies to restrict access based on security classifications.</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>To design systems capable of continuing operations even in the event of component failures, minimizing disruptions and ensuring resilience.</p> Signup and view all the answers

<p>Biometric authentication (A)</p> Signup and view all the answers

<p>IDPS monitor network and system activity for signs of unauthorized access or malicious behavior, preventing attacks and ensuring systems remain operational and secure.</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>Steganography involves concealing data within other media (like images, audio, or text), focusing on hiding the existence of the message rather than securing it. Cryptography, on the other hand, aims to secure the message content by transforming it into an unreadable format.</p> Signup and view all the answers

<p>Firewalls act as barriers, filtering incoming and outgoing traffic based on predefined rules, to prevent unauthorized access from untrusted networks and protect internal systems.</p> Signup and view all the answers

<p>Access control mechanisms (D)</p> Signup and view all the answers

<p>A zero-day exploit targets a vulnerability that has not yet been patched by vendors, allowing attackers to leverage it before any security measures can be implemented.</p> Signup and view all the answers

<p>Financial gain (B)</p> Signup and view all the answers

<p>ACLs manage permissions for files and directories, defining which users can access specific resources, effectively controlling data access and preventing unauthorized actions.</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>The NIST CSF provides a flexible framework that organizations can adapt to their specific needs. It focuses on five core functions: Identify, Protect, Detect, Respond, and Recover, enabling organizations to assess their cybersecurity posture and improve resilience.</p> Signup and view all the answers

<p>Developing AI-powered security solutions (B)</p> Signup and view all the answers

<p>The CIS Controls prioritize essential actions and recommendations for securing systems and data, focusing on key areas like inventory management, secure configurations, and continuous monitoring.</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>The PCI DSS provides requirements for enhancing payment card data security, particularly for organizations handling payment card transactions. It aims to mitigate risks associated with payment card fraud and data breaches.</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>The 'Morris Worm' was one of the first significant cybersecurity incidents, highlighting the potential impact of malware and demonstrating the vulnerability of interconnected systems.</p> Signup and view all the answers

<p>The use of botnets for DDoS attacks (B)</p> Signup and view all the answers

<p>Cyberattacks in the 2000s saw a significant rise in financial motives, with the emergence of phishing, identity theft, botnets, and DDoS attacks. Advanced malware (spyware and adware) gained popularity, and nation-state sponsored attacks also became more prominent.</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>APTs are often state-sponsored operations with long-term strategic goals, aiming to gather intelligence, infiltrate organizations, or sabotage critical systems for espionage or political objectives.</p> Signup and view all the answers

<p>The future of cybersecurity will be shaped by the increasing use of AI and machine learning in attacks, the emergence of cybercrime-as-a-service platforms, rising geopolitical tensions, and the growing vulnerability of 5G and IoT devices. This will require organizations and governments to adapt their strategies and defenses to address these evolving threats.</p> Signup and view all the answers

<p>Financial market regulation (A)</p> Signup and view all the answers

<p>The GDPR is one of the most stringent data protection regulations globally, imposing strict guidelines on how businesses collect, store, and process personal data for individuals within the EU. It emphasizes the right to privacy and imposes significant fines for non-compliance.</p> Signup and view all the answers

<p>Promoting international data sharing and cooperation (B)</p> Signup and view all the answers

<p>Regulating AI raises ethical, social, and legal challenges. Key concerns include algorithmic bias, transparency, accountability, and the impact on jobs and society. Finding the right balance between promoting innovation in AI and addressing these concerns is essential for ensuring responsible development and application of AI.</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>The Online Safety Bill aims to regulate social media platforms and other online services to protect users from harmful content, including hate speech, cyberbullying, and child exploitation, ensuring a safer online experience for users.</p> Signup and view all the answers

<p>To balance the protection of creators' rights with the free flow of information and access to technology (C)</p> Signup and view all the answers

The practice of protecting systems, networks, and programs from digital attacks.

A model that guides security policies for information security, focusing on Confidentiality, Integrity, and Availability.

Ensures that information is only accessible to authorized individuals.

Ensures data is accurate and hasn't been altered by unauthorized entities.

Ensures that data and systems are accessible to authorized users when needed.

The process of verifying the identity of a user or system before granting access.

Mechanisms that restrict access to systems and data based on permissions.

Ensures that individuals or entities cannot deny their actions or communications.

Malicious software designed to disrupt, damage, or gain unauthorized access to computer systems.

A technique used to deceive individuals into revealing sensitive information by appearing trustworthy.

A type of malware that encrypts data and demands payment for decryption.

Distributed Denial of Service attack, where multiple systems overwhelm a target with traffic to make it unavailable.

An attack that exploits vulnerabilities in a web application by injecting malicious SQL code.

The practice of securing information by transforming it into an unreadable format for unauthorized users.

An attack that occurs on the same day a vulnerability is discovered, before a patch is available.

A system that monitors network or system activities for malicious actions or policy violations.

A structured approach outlining how to detect, respond to, and recover from cybersecurity incidents.

Creating systems of prevention and recovery to deal with potential threats to a company.

Manipulating people into breaking security protocols to gain sensitive information.

A network security device that monitors and controls incoming and outgoing network traffic based on security rules.

The process of identifying and analyzing vulnerabilities in systems and applications.

Simulated cyber attacks on a system, conducted to identify and fix security vulnerabilities.

The process of converting information into code to prevent unauthorized access.

An individual within an organization who exploit their access for malicious purposes.

A prolonged and targeted cyber attack where an intruder gains access to a network and remains undetected.

A group responsible for preparing for and responding to cybersecurity incidents.

The process of creating copies of data to restore in case of loss or corruption.

The division of a computer network into smaller, isolated segments to improve security.

Knowledge about existing or emerging threats to inform security decisions.

Measures taken to protect the processes and partners involved in the production and distribution of goods.