Cybersecurity Quiz: Phishing and IT Security Concepts

A situation in which a system or application is susceptible to an attack due to a weakness in its design, implementation, or configuration.

An attack that exploits a vulnerability in a system or application to gain unauthorized access or cause damage.

A business policy allowing employees to use their own mobile devices to access company resources and applications.

The increased complexity of technology in modern systems, which can lead to more potential vulnerabilities and security risks.

The constant evolution and change in technology creates new security risks that are difficult to assess and manage.

A patch is a software update that fixes a known security vulnerability.

The pressure to respond quickly to user inquiries can lead to security compromises, as IT professionals may not have time to properly secure systems.

The increasing reliance on commercial software with known vulnerabilities makes systems more vulnerable to attacks.

An attack that uses fraudulent emails to trick recipients into revealing personal information.

A targeted phishing attack focused on a specific organization's employees.

Emails designed to look like they come from higher-ranking executives within an organization, making them seem more trustworthy.

The use of social engineering techniques to manipulate or deceive individuals into revealing confidential information or performing actions that compromise security.

A sophisticated phishing attack that uses custom-built websites and elaborate stories to mimic legitimate organizations and deceive users into believing they're interacting with a trusted source.

This law outlines various offenses related to manipulating computer data that can lead to legal consequences. It protects users from harmful and misleading digital information.

This is a set of actions designed to make it extremely hard for hackers to breach security. It relies on creating multiple layers of protection, so that even if attackers overcome one, they will face another obstacle.

A key part of layered security, this prevents unauthorized access into a private network, much like a gatekeeper.

This provides a comprehensive view of security events happening within a network. It allows for the quick identification and response to threats.

Software designed to detect and remove malicious programs that could harm devices or steal data.

A process that ensures only authenticated users are allowed access to specific information or resources.

Regular audits assess the effectiveness of security measures and identify potential weaknesses that need to be addressed.

Publishing false written statements that damage a person's or organization's reputation.

Using anonymous email accounts or screen names to post online, potentially leading to libel concerns.

The practice of companies storing and selling data they collect about customers, employees, and others.

Determining if the collection and sale of personal data is fair and reasonable to individuals.

Understanding what data is stored about you, how long it's kept, and who controls it.

Taking steps to protect your personal information online and in various databases.

Being cautious about sharing information when making online purchases.

Companies should inform individuals about their data storage practices.

A set of principles and core values that guide a group's behavior.

A process for making ethical decisions that involves recognizing the issue, considering stakeholders, gathering information, formulating actions, making a decision, acting, and reflecting on the outcome.

The misuse of information or technology that can harm individuals, organizations, or society as a whole.

An issue where someone's personal information is used or disclosed without their consent.

The spread of false or misleading information that can damage reputations or cause harm to individuals or organizations.

The use of technology to promote or spread religious intolerance or hate speech.

The overuse of social media or technology to the point where it becomes harmful or addictive.

The use of technology to engage in bullying, harassment, or online threats.

Legal basis for data processing, like consent or legitimate interests, that determines how personal information can be used.

A person or organization that determines the purposes and means of processing personal data.

A person or organization that processes personal data on behalf of the data controller.

An individual whose personal data is being processed.

Data that reveals sensitive information about an individual, like health data or political opinions.

A set of guidelines for ethical conduct in Information Systems.

The study and understanding of what is right and wrong.

Actions that are considered morally acceptable and align with societal norms.

Situations that present ethical dilemmas for individuals or organizations.

The study of the impact of Information Systems on society, including ethical considerations.