Cybersecurity Concepts Quiz

Security Incident

• A security event that damages network resources or data as part of an attack or security threat.

Exploit

• A piece of code, software, or method used by attackers to take advantage of vulnerabilities or weaknesses in applications, systems, or networks.
• Known exploits: vulnerabilities or attack methods already discovered, documented, and made public.
• Unknown exploits (zero-day exploits): vulnerabilities or attack methods not yet known or disclosed to the public.

Denial of Service (DoS) attack

• A cyberattack that floods a computer or website with data to overload the system and prevent it from working properly.

Malware

• Harmful software like spyware, viruses, ransomware, and worms that can access a system's data.

Identity theft

• A criminal gains access to a user's personal information and uses it for their own benefit.

Cryptojacking

• Cybercriminals use a victim's computer resources to mine cryptocurrencies without their knowledge.

Cross-Site Request Forgery (CSRF)

• An attack that forces an end user to execute unwanted actions on a web application they are currently authenticated in.

Disk Forensics

• The process of experts recovering deleted data and hidden partitions from physical storage devices.

Network Forensics

• Investigating network traffic to collect evidence regarding security incidents, unauthorized access, or other malicious activity.

Database Forensics

• Collecting information contained in databases, including data and metadata.

Mobile Forensics

• Examining and recovering data from mobile devices using specialized software.

Malware Forensics

• Finding, examining, and tracking the attacking malware.

Physical Security

• Protecting buildings and equipment from unwanted intruders.
• Preventing unauthorized entry and providing access to authorized individuals.

Proactive Intrusion Detection

• A crucial first line of defense in physical security to prevent intrusions.

Scalable Physical Security Implementation

• Easy to install and quick to set up solutions for physical security that can be easily scaled.

Seamless System Integrations

• Physical security systems that integrate with other software and applications in the cloud. This often provides integration with other security systems or operations.

Audit Trails and Analytics

• Easily detecting weaknesses in your system to implement new physical security plans.

Operational Security (Procedural Security)

• Risk management process that encourages managers to view operations from an adversary's perspective to protect sensitive information.

Information Privacy

• The right of individuals to control how their personal data is collected, stored, and shared.

Data Ownership

• Individuals own their personal data and have the right to decide how it is used.

Data Collection Practices

• Companies collecting data through online forms, cookies, and applications. Clear consent must be obtained before collecting data.

Tracking Technologies

• Tools like cookies and mobile apps track user activity.

Data Breaches

• Unauthorized access to sensitive data, potentially leading to identity theft or fraud.

Social Media

• Over-sharing and a lack of privacy controls can expose personal information to risk.

Data Privacy Act of 2012 (RA 10173)

• Protects individual privacy by regulating the processing of personal data.

Freedom of Expression

• The ability of individuals to express their beliefs, opinions, thoughts and emotions without government censorship.

Criminal Defamation Laws

• Frequently abused; used in cases not involving public interest and as a first (rather than last) resort.

Attacks on Media Workers

• Harassment of journalists and media workers significantly threatens independent and investigative journalism.

Informal Censorship

• Designed to prevent or punish the publication/broadcast of critical material.

Hate Speech

• Undermines the effective enjoyment of rights for those targeted.

Gender Equity

• Ensuring proper coverage of female issues in the media and representing women's perspectives.

Intellectual Property (IP)

• Includes intangible assets owned by a company or individual, like copyrights and patents.

Copyright

• Legal rights to creations expressing or embodying ideas.

Patents

• Legal rights granted for new, useful inventions to prevent others from making, using, or selling them.

Patent Infringement

• The act of using a patented invention without permission.

Trade Secret

• Confidential business information that gives a company a competitive advantage.

Acceptable Use Policy

• Policy outlining permitted and prohibited uses of technology or services.

Data Classification Policy

• Policy to define and classify sensitive data.

Incident Response Policy

• Standard operating procedures for handling security incidents.

Access Control Policy

• Policy establishing procedures for managing access to systems and information.

Transparency in data collection

• Requirement of transparency about how personal data is collected.

Secure storage of personal information.

• Data should be protected to prevent unauthorized access.

Rights of individuals to access and correct their data.

• Allowing individuals to access and amend their personal data as needed.

Five freedom-of-speech key issues

• (List needed, this section is incomplete).

IP key terms

• (List needed, this section is incomplete).

Examples of Trade Secrets

• (List needed, this section is incomplete).

Examples of Patents

• (List needed, this section is incomplete).

Test your knowledge on essential cybersecurity concepts such as exploits, denial of service attacks, and malware. This quiz covers various aspects of security incidents and identity theft. Challenge yourself to see how well you understand these critical topics!