Cybersecurity Essentials Quiz

Digital Security Risks

• A digital security risk is any event or action that could harm computer or mobile device hardware, software, data, information, or processing capabilities.
• Computer crime is any illegal act involving computers or related devices.
• Cybercrime is an online or internet-based illegal act.

Internet and Network Attacks

• Information transmitted over networks carries a higher security risk than information stored on premises.
• Malware is malicious software that operates without user knowledge and alters computer/mobile device operation.

Common Malware Types

• Adware: Displays online ads on webpages, emails, or other internet services.
• Ransomware: Blocks or limits access to computers, phones, or files until a payment is made.
• Rootkit: Hides in a device and allows remote control.
• Spyware: Secretly collects user information and sends it to an outside source.
• Trojan horse: Appears legitimate but contains malicious code. Does not replicate itself.
• Virus: Damages a computer or device by negatively altering operations without permission.
• Worm: Replicates itself repeatedly, consuming resources and potentially shutting down systems.

Internet and Network Attacks (Continued):

• A botnet is a group of compromised computers/devices in a network.
• A zombie is a compromised computer/device.
• A Denial of Service (DoS) attack disrupts computer access to internet services. A Distributed DoS (DDoS) attack is a coordinated DoS.
• A backdoor is a program that bypasses security controls.
• Spoofing disguises a network/internet transmission to appear legitimate.

Internet and Network Attacks (Continued):

• A firewall is hardware or software that protects a network from intrusion.

Unauthorized Access and Use

• Access controls determine who can access a system, when, and what actions are allowed.
• A system should maintain an audit trail documenting successful and failed access attempts.
• Examples of access controls include: username, password.

Unauthorized Access and Use (Continued)

• A passphrase is a private combination of words, often containing mixed capitalization and punctuation. Used with usernames for access.
• A PIN (personal identification number), sometimes called a passcode, is a numeric password. Assigned by companies or users.
• A possessed object (e.g., token) is required for access to the system.
• Biometric devices use physical or behavioral characteristics to verify identity.

Unauthorized Access and Use (Continued):

• Fingerprint readers, face recognition systems, hand geometry systems, iris recognition systems, and signature/voice verification systems are examples of biometric verification methods.
• Two-step verification uses two separate methods for user identity verification.

Unauthorized Access and Use (Continued):

• Digital forensics is the discovery, collection, and analysis of evidence found on computers and networks.
• Digital forensics is used in many fields, such as law enforcement, criminal prosecutions, military intelligence, insurance, and information security.

Information Theft

• Information theft occurs when someone steals personal or confidential information.
• Encryption converts readable data into encoded characters, preventing unauthorized access.

Ethics and Society

• Technology ethics are moral guidelines that govern the use of computers, mobile devices, information systems, and related technologies.
• Information accuracy is a concern, as not all online information is correct.

Information Privacy

• Information privacy is the right of individuals and companies to control the collection, use, and sharing of information about them.
• Huge databases store large amounts of online data.
• Websites often collect data to customize ads and send personalized emails.
• Some employers monitor computer and email use.

Information Privacy (Continued)

• A cookie is a small text file that a web server stores on a computer. It's used for personalization, storing user information, assisting in online shopping, tracking site visits, and targeting advertisements.

Information Privacy (Continued)

• Phishing is a scam where a perpetrator sends official-looking messages to obtain personal or financial information.
• Clickjacking involves malicious code embedded in a website's clickable elements.

Information Privacy (Continued)

• Spyware secretly collects user information from computers/mobile devices and sends it to an outside source.
• Adware uses banners, pop-ups, or pop-unders to display online advertisements.

Information Privacy (Continued)

• Social engineering involves gaining unauthorized access by exploiting trust and naivety.
• Federal and state laws regulate personal data storage and disclosure due to privacy concerns.

Information Privacy (Continued)

• Content filtering restricts access to specific materials.
• Web filtering software restricts access to certain websites.

Test your knowledge on cybersecurity concepts, including the functions of cookies, types of malware, and methods of authentication. This quiz covers essential topics related to online security measures and cyber threats. Get ready to challenge yourself and learn more about protecting digital information.