Cybersecurity Fundamentals Quiz

Cybersecurity Fundamentals

• Cybersecurity encompasses the technologies, processes, and practices designed to protect computer systems, networks, and data from unauthorized access, use, disclosure, disruption, modification, or destruction.
• A core principle is the CIA triad: Confidentiality (ensuring only authorized users access information), Integrity (maintaining the accuracy and completeness of data), and Availability (ensuring authorized users have timely access to resources).

Network Security Concepts

• Network security involves protecting the confidentiality, integrity, and availability of data transmitted and stored within a network.
• Common network security threats include malware (viruses, worms, Trojans), denial-of-service attacks, phishing, and man-in-the-middle attacks.
• Firewalls act as a gatekeeper, controlling network traffic based on predefined rules to block unauthorized access.
• Intrusion detection and prevention systems monitor network traffic and identify malicious activities, automatically blocking or alerting to potential threats.

Types of Attacks

• Malware encompasses various malicious software types, including viruses, worms, Trojans, ransomware, spyware, and adware, each with different methods of infiltration and damage.
• Denial-of-service (DoS) attacks flood a target system with traffic, overwhelming its resources and rendering it unavailable to legitimate users.
• Phishing attacks use deceptive tactics, such as fraudulent emails or websites, to trick users into revealing sensitive information.
• Man-in-the-middle (MitM) attacks intercept communication between two parties, allowing attackers to eavesdrop or modify data.

Security Controls and Measures

• Strong passwords, multi-factor authentication (MFA), and access controls limit unauthorized access to sensitive data and systems.
• Data encryption protects sensitive information in transit and at rest, making it unreadable to unauthorized parties.
• Data loss prevention (DLP) systems monitor and prevent sensitive data from leaving the organization's control.
• Regular software updates and patching address vulnerabilities and protect against known exploits.

Vulnerabilities and Threats

• System vulnerabilities are weaknesses in software or hardware that malicious actors can exploit.
• Common vulnerabilities include buffer overflows, SQL injection, and cross-site scripting (XSS).
• Social engineering exploits human psychology to trick individuals into compromising security.
• Insider threats arise from malicious or negligent actions of insiders.

Security Protocols and Standards

• Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols encrypt communication between web browsers and servers, ensuring secure data transmission.
• Secure Shell (SSH) provides secure remote login and command execution.
• Common security standards like NIST Cybersecurity Framework and ISO 27001 provide guidelines and best practices for building strong information security programs.

Important Security Practices

• Regularly backing up data safeguards against data loss from various threats.
• Employee training programs educate staff on security protocols and procedures, reducing the risk of phishing and social engineering attacks.
• Continuous monitoring for suspicious activity helps detect and respond to threats efficiently.
• Incident response plans outline procedures to handle security incidents effectively.