Information Security Basics Quiz

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

What is one of the primary goals of information security awareness?

To maintain awareness and skills among employees (correct)

To minimize employee salaries

To manage social media accounts

To increase internet speed

Which type of malware is NOT discussed in the session agenda?

Spyware

Worms

Zombie malware (correct)

Viruses

What was highlighted as a top security concern in 2015?

Increased hardware sales

New software installations

Top security breaches (correct)

Social media marketing

Which of the following is considered a human-based attack?

Phishing attacks Signup and view all the answers

Which of the following is NOT a security tip mentioned in the session?

Using HTTP instead of HTTPS Signup and view all the answers

What does 'clearing your screen' refer to in the context of security tips?

Ensuring no sensitive information is visible Signup and view all the answers

Which security measure is recommended for protecting mobile devices?

Installing security software Signup and view all the answers

What is a key component of incident reporting?

Documenting security incidents Signup and view all the answers

What does 'business continuity' refer to in the context of information security?

Continuing operations after security incidents Signup and view all the answers

What should you do to protect sensitive data?

Always backup sensitive data Signup and view all the answers

Which action should you take when stepping away from your workstation?

Lock the workstation using Windows key + L Signup and view all the answers

Why is it important to keep your operating system and applications updated?

To ensure they contain security patches Signup and view all the answers

What is a recommended practice when using strong passwords?

Try not to confuse it with personal account passwords Signup and view all the answers

What should you avoid when charging your smartphone?

Charging from the PC Signup and view all the answers

What percentage of information security is attributed to behavior rather than technology?

80% Signup and view all the answers

What security measure should be taken for a strong password?

At least 8 characters Signup and view all the answers

Which statement is true regarding social networking security?

Limit personal information posted. Signup and view all the answers

What is one recommended action for email security?

Contact the sender if you are unsure about an attachment. Signup and view all the answers

What does the Web of Trust (WOT) help users determine?

It informs trusted websites for safe browsing. Signup and view all the answers

Which of the following is a suggestion for mobile phone security?

Always use a screen lock. Signup and view all the answers

What is a best practice for physical security at a workstation?

Always lock the workstation when leaving. Signup and view all the answers

What should you do with sensitive documents after use?

Shred them for disposal. Signup and view all the answers

Which of the following is NOT a recommended practice for mobile security?

Plug your phone into any PC. Signup and view all the answers

Which characteristic is essential for a password phrase?

Mix of characters and words. Signup and view all the answers

What precaution should be taken regarding third-party applications in social networking?

Limit the sharing of personal data. Signup and view all the answers

What is the first step in incident reporting?

Report Signup and view all the answers

What is an example of a successful phishing attack?

A customer complaining about unauthorized transfer Signup and view all the answers

What does the acronym IRC stand for in incident reporting?

Incident Response Coordinator Signup and view all the answers

Which of the following reflects a countermeasure to information security risks?

Proactively identifying potential leaks Signup and view all the answers

What is one common misconception about digital information?

It is inherently safe from attacks Signup and view all the answers

What is a key characteristic of digital information?

It is easy to leak Signup and view all the answers

Which of the following is a type of social engineering attack?

Shoulder surfing Signup and view all the answers

In the case of a phishing email detected, what is the typical content of the email?

A request for account verification Signup and view all the answers

What should be avoided when dealing with potential security incidents?

Delayed action Signup and view all the answers

What is a characteristic of phishing emails?

Forged sender’s address Signup and view all the answers

Which department usually addresses an incident after it has been reported?

Repair and support unit (RSU) Signup and view all the answers

What does APT stand for in information security?

Advanced Persistent Threat Signup and view all the answers

What does successfully falling for phishing lead to?

Unauthorized financial transfers Signup and view all the answers

The first line of defense against social engineering attacks is:

Staff awareness and training Signup and view all the answers

Which method is NOT considered a form of information gathering for phishing?

Online purchase transactions Signup and view all the answers

What should be reported as a potential sign of an APT attack?

Odd user behavior after hours Signup and view all the answers

Which of the following is NOT a human-based social engineering attack method?

Online Scams Signup and view all the answers

What is a common tactic of an attacker who conducts a phishing campaign?

Using forged content Signup and view all the answers

Which of the following is a countermeasure against APTs?

Reporting strange user activity Signup and view all the answers

Which of the following tactics is used in dumpster diving?

Collecting discarded documents Signup and view all the answers

Study Notes

Information Security Goals

Maintain an appropriate level of knowledge and skills among employees and managers
Ensure business continuity if information security incidents occur

Types of Malware

A type of social engineering attack where unauthorized personnel gain access to the network undetected for a long time to steal data
Often uses social engineering to gain access to the network via legitimate means
Establishes a backdoor once access is achieved
Countermeasures include reporting odd user behavior, keeping aware of social engineering attempts, and understanding information/credentials disclosure compromises the entire information system

Top Security Breaches of 2015

Not mentioned in provided material

Human based attacks:
- Information gathering (Social media vectors)
- Shoulder surfing
- Dumpster diving
- Impersonation
- Phishing
Computer based attacks:
- Online Scams

Incident Reporting

Report, fix, follow-up
Repair and Support unit (RSU)
Incident Reporting Coordinator (IRC)
Concerns about business line

###Security Tips & Counter-measures

HTTPs:
- Protect by encrypting information sent between computer and website
WOT:
- Shows a colored traffic light to indicate the trustworthiness of websites
Social networking security:
- Limit the amount of personal information you post
- Be cautious of third-party applications
- Use strong passwords
- Check privacy policies
Password security:
- At least 8 characters
- Mix of upper and lowercase characters
- Mix of alpha and numeric characters
- Don't use dictionary words
- Change passwords frequently
- Don't share or reuse passwords
- Use different passwords for different accounts
- Don't write down passwords
- Use password phrases
Clear desk & clear screen:
- Clear away paperwork
- Use shredders when disposing of sensitive documents
- Lock desks and filing cabinets
- Lock away portable devices such as tablets
- Lock your workstation when you leave
- Make sure no documents are left in the printer
- Treat mass storage devices (CDROM, DVDs, USB drives) as sensitive and secure
- them in a locked drawer
Email Security
- Never open an attachment from an unknown sender
- Make sure the email references the attachment
- Don't hesitate to contact the sender of an email that contains an attachment
- Never send anyone your personal data (name, address, phone number, password, account numbers)
- In case of suspicion, contact the IT department or the information security officer
Mobile threat & security:
- Number of malicious installation packages and new malicious programs detected (Q3 2014 – Q1 2015)
- Never plug in your phone to the PC
- Download applications only from trusted sources
- Install antimalware controls
- Never store business-related documents on your phone
- Always change the factory pin code (0000)
- Always use a screen lock
- Install locking features
- Use secure messaging applications
- Secure personal email
How to protect your PC:
- Always back up sensitive data
- Always lock your workstation when away from your desk
- Ensure that antivirus definitions are updated regularly
- Reboot your system after applying new updates
- Use a strong password and try not to be confused with passwords used for personal accounts
- Never charge smartphones from the PC
- Never insert a USB or any storage device into your PC

Conclusion

Security is 20% technical and 80% behavior

Studying That Suits You

Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

Description

Test your knowledge on the fundamentals of information security including malware types, social engineering attacks, and incident reporting. This quiz covers key concepts that are vital for maintaining a secure environment in any organization.