Cybersecurity Fundamentals

10 Questions

What is the primary purpose of the NIST Cybersecurity Framework?

To manage and reduce cybersecurity risk

Which of the following is responsible for overseeing an organization's cybersecurity strategy?

Chief Information Security Officer (CISO)

What is the main goal of regularly backing up important data?

To prevent loss in case of a breach

What is the role of a Penetration Tester?

To simulate attacks to test an organization's defenses

What is the primary purpose of ISO 27001?

To implement an Information Security Management System (ISMS)

What type of cybersecurity threat involves fraudulent emails or messages that trick users into revealing sensitive information?

Phishing

What is the purpose of encryption in cybersecurity?

To convert plaintext data into unreadable ciphertext

What is the primary goal of a DDoS attack?

To disrupt service availability

What is the recommended cybersecurity practice to avoid using the same password across multiple sites?

Use strong and unique passwords

What is the purpose of regular updates and patches in cybersecurity?

To fix vulnerabilities and keep software up-to-date

Study Notes

Types of Cybersecurity Threats

Malware: Software designed to harm or exploit computer systems, including viruses, worms, trojans, and ransomware.
Phishing: Fraudulent emails, texts, or messages that trick users into revealing sensitive information.
Ransomware: Malware that encrypts files and demands payment in exchange for decryption.
SQL Injection: Attacks that exploit vulnerabilities in databases to steal or manipulate data.
DDoS (Distributed Denial of Service): Overwhelming websites or systems with traffic to make them unavailable.

Cybersecurity Measures

Firewalls: Network security systems that monitor and control incoming and outgoing traffic.
Encryption: Converting plaintext data into unreadable ciphertext to protect it from unauthorized access.
Password Management: Securely storing and generating complex passwords to prevent unauthorized access.
Network Segmentation: Dividing networks into smaller, isolated segments to limit the spread of threats.
Regular Updates and Patches: Keeping software and systems up-to-date to fix vulnerabilities.

Cybersecurity Best Practices

Use Strong, Unique Passwords: Avoid using the same password across multiple sites.
Keep Software Up-to-Date: Regularly update operating systems, browsers, and plugins.
Be Cautious with Emails and Links: Avoid suspicious links and attachments, and verify senders before responding.
Use Two-Factor Authentication: Add an extra layer of security to accounts with 2FA.
Back Up Data: Regularly back up important data to prevent loss in case of a breach.

Cybersecurity Frameworks and Standards

NIST Cybersecurity Framework: A voluntary framework for managing and reducing cybersecurity risk.
ISO 27001: A standard for implementing an Information Security Management System (ISMS).
HIPAA: A standard for protecting sensitive healthcare information.

Cybersecurity Careers and Roles

Chief Information Security Officer (CISO): Oversees an organization's cybersecurity strategy.
Security Analyst: Identifies and responds to security threats.
Penetration Tester: Simulates attacks to test an organization's defenses.
Incident Responder: Responds to and contains security breaches.