Cybersecurity Threats

Which of the following is the BEST way to obscure your email address when posting online to avoid spam?

What is the term used to describe the practice of registering a domain name that is a common misspelling of a popular website, with the intention of taking advantage of typing errors?

Which of the following is the BEST practice to avoid ending up on a spammer's mailing list when posting online?

Which of the following technologies is PRIMARILY used to mitigate the damage caused by a security breach, after prevention and resistance strategies have failed?

Which of the following is the BEST description of a firewall's primary function?

What is the term for a type of malware designed to trick victims into giving up personal information to purchase or download useless and potentially dangerous software?

Which term refers to the forging of the return address on an email to make it appear as if it comes from a different sender?

What is the characteristic of typosquatting?

Which term refers to a program or device that can monitor data traveling over a network?

What do we call the action of granting authorized rights inappropriately known as?

Which of the following is a key purpose of an anti-spam policy?

What is the purpose of a social media policy in an organization?

What is the 'right to be forgotten' in the context of online content?

What is 'teergrubing' in the context of anti-spam measures?

Which of the following is a key concern regarding employee monitoring in the workplace?

What is the primary purpose of an Acceptable Use Policy (AUP)?

Which of the following is an example of cybervandalism?

What is the purpose of an Internet Use Policy?

Which of the following is an example of typosquatting?

What is the purpose of a Social Media Policy?

What is the term used to describe the theft of a website's name that occurs when someone, posing as a site's administrator, changes the ownership of the domain name assigned to the website owner?

Which of the following is a legitimate ground for reading a user's email according to a typical email privacy policy?

What is the term used to describe the problem that occurs when someone registers purposely misspelled variations of well-known domain names to lure consumers who make typographical errors when entering a URL?

Which of the following is a form of cybervandalism?

Which of the following is a typical feature of an email privacy policy?

Which of the following is NOT a technique used to gain personal information for the purpose of identity theft?

What is the term used to describe the practice of artificially stimulating online conversation and positive reviews about a product, service, or brand?

Which of the following is the LEAST effective way for an organization to help combat insider issues related to information security?

Which of the following is the term used to describe the practice of registering a domain name that is a common misspelling of a well-known website, with the intent of diverting traffic or deceiving users?

Which of the following is the MOST important step an organization should take to help combat insider issues related to information security?

Which of the following is a key component of an effective employee monitoring policy?

What is the term used to describe the practice of registering a domain name that is a common misspelling of a popular website, with the intention of taking advantage of typing errors?

Which of the following is an example of an intellectual asset that needs to be protected by an organization?

What is the term used to describe the practice of intentionally defacing or damaging a website or web application?

Which of the following is a potential consequence of a security breach that can result in downtime for an organization?

What is the term used to describe the practice of registering a domain name that is similar or identical to a well-known brand or company, with the intention of taking advantage of brand recognition or causing confusion?

Which of the following is a potential consequence of a security breach that can impact an organization's financial performance?

What is the term used to describe the practice of intentionally accessing or attempting to access a computer system or network without authorization?

Which of the following is a potential consequence of a security breach that can impact an organization's reputation?

Which of the following is a potential consequence of a security breach that can result in additional expenses for an organization?

The Ethical Computer Use Policy is designed to ensure that all users are informed of the rules by agreeing to the use of the system on the basis of consent to abide by the rules.

The General Data Protection Regulation (GDPR) does not contain any general principles regarding information privacy.

The General Data Protection Regulation (GDPR) requires users to agree to an Acceptable Use Policy before being granted access to corporate email and information systems.

Nonrepudiation is a contractual stipulation that ensures ebusiness participants can deny their online actions.

Nonrepudiation is a contractual stipulation that ensures ebusiness participants cannot deny their online actions.

An Internet Use Policy typically describes the services available to users, but does not define the organization's position on the purpose of Internet access or any restrictions on that access.

The Internet Use Policy does not contain any general principles to guide the proper use of the internet.

Acceptable Use Policies (AUPs) do not require a user to agree to follow it in order to be provided access to corporate email, information systems, and the internet.

According to a typical Acceptable Use Policy, users are not required to cite sources or handle offensive material when using the organization's technology resources.

$5(7 + 3)$ is an example of a user responsibility described in a typical Acceptable Use Policy.

The General Data Protection Regulation (GDPR) is a legal framework that sets guidelines for the collection and processing of personal information only within the European Union (EU).

An Acceptable Use Policy (AUP) typically outlines the responsibilities and permitted actions of users regarding organizational systems and data.

Nonrepudiation is a security principle that ensures a party cannot deny having performed a particular action related to data or information.

An Internet Use Policy typically prohibits any personal use of the internet while at work.

The 'right to be forgotten' in the context of online content allows individuals to request to have all content that violates their privacy removed.

In an Acceptable Use Policy, user responsibilities may include reporting any suspected security incidents or policy violations.

An Acceptable Use Policy (AUP) is primarily used to outline the corporate guidelines or principles governing employee online communications.

Nonrepudiation is a key component of an effective employee monitoring policy, ensuring that actions taken by employees cannot be denied later.

An Internet Use Policy is primarily used to mitigate the damage caused by a security breach, after prevention and resistance strategies have failed.

The 'opt-in' approach to email permissions requires users to choose to deny permission to incoming emails.

The General Data Protection Regulation (GDPR) gives individuals the 'right to be forgotten', which allows them to request the removal of their personal data from online platforms.

An Acceptable Use Policy (AUP) is primarily focused on defining user responsibilities and acceptable behaviors when using an organization's information systems and resources.

Nonrepudiation is a security principle that ensures the sender of a message cannot deny having sent the message, and the recipient cannot deny having received it.

An Internet Use Policy should focus on regulating employee access to social media websites, but does not need to address guidelines for the use of organization-provided email accounts.

According to a typical Acceptable Use Policy, users are responsible for ensuring the security and integrity of their own user accounts, but are not responsible for reporting any suspected security incidents or breaches.

The right to be left alone, control over personal possessions, and not being observed without consent are key components of Acceptable Use Policy.

Nonrepudiation ensures that messages and information are available only to authorized individuals.

Internet Use Policy is primarily concerned with ethical principles that guide employee behavior in an organization.

GDPR governs the principles and standards that guide our behavior towards other people in a business environment.

User responsibilities in Acceptable Use Policies include ensuring data privacy compliance and enforcing digital rights management.

The General Data Protection Regulation (GDPR) does not contain any general principles regarding information privacy.

Nonrepudiation is a contractual stipulation that ensures ebusiness participants can deny their online actions.

According to a typical Acceptable Use Policy, users are not required to cite sources or handle offensive material when using the organization's technology resources.

The Internet Use Policy does not contain any general principles to guide the proper use of the internet.

$5(7 + 3)$ is an example of a user responsibility described in a typical Acceptable Use Policy.

The General Data Protection Regulation (GDPR) requires users to agree to an Acceptable Use Policy before being granted access to corporate email and information systems.

Nonrepudiation is a contractual stipulation that ensures ebusiness participants cannot deny their online actions.

The Ethical Computer Use Policy is designed to ensure that all users are informed of the rules by agreeing to the use of the system on the basis of consent to abide by the rules.

The Internet Use Policy typically describes the services available to users, but does not define the organization's position on the purpose of Internet access or any restrictions on that access.

The primary purpose of an Acceptable Use Policy (AUP) is to ensure that all users are informed of the rules by agreeing to the use of the system on the basis of consent to abide by the rules.