Disaster Recovery Quiz and Flashcards: IT Chapter 6

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

What is the primary goal of confidentiality in information security?

To detect and prevent Denial of Service attacks

To ensure data is accurate, complete, and not modified without authorization

To protect sensitive information from unauthorized access or viewing (correct)

To ensure data is accessible and usable when needed

What type of threat involves authorized personnel misusing access privileges?

Physical Threats

Unauthorized Access

Malware

Insider Threats (correct)

Which security control involves policies, procedures, and guidelines governing information security?

Physical Controls

Security Measures

Technical Controls

Administrative Controls (correct)

What is the primary goal of availability in information security?

To ensure data is accessible and usable when needed Signup and view all the answers

Which security measure involves verifying the identity of users, devices, or systems?

Authentication Signup and view all the answers

What type of threat involves overwhelming a system with traffic to make it unavailable?

Denial of Service (DoS) Signup and view all the answers

What type of security control involves the use of locks, fences, and surveillance cameras?

Physical Controls Signup and view all the answers

What is the primary goal of integrity in information security?

To ensure data is accurate, complete, and not modified without authorization Signup and view all the answers

Which security measure involves controlling access to resources based on user identity and permissions?

Authorization Signup and view all the answers

What type of threat involves malicious software, such as viruses, worms, and Trojan horses?

Malware Signup and view all the answers

What is the primary objective of information security?

To protect information and information systems from unauthorized access Signup and view all the answers

Which of the following is NOT a type of threat to information security?

Natural Disasters Signup and view all the answers

What is the primary goal of risk assessment in risk management?

To identify and evaluate potential risks to information security Signup and view all the answers

Which type of control is used to prevent unauthorized physical access to information systems?

Physical Controls Signup and view all the answers

What is the primary goal of incident response in risk management?

To respond to and manage security incidents Signup and view all the answers

Which type of threat involves the unintentional exposure of sensitive information?

Accidental Data Breaches Signup and view all the answers

What is the primary goal of technical controls in information security?

To implement technical measures such as firewalls and encryption Signup and view all the answers

Which of the following is a type of security control?

Administrative Controls Signup and view all the answers

What is the primary goal of risk mitigation in risk management?

To implement controls to reduce or eliminate identified risks Signup and view all the answers

Which of the following is NOT a key concept of information security?

Authenticity Signup and view all the answers

What is an example of a physical threat to computer and network systems?

Natural disasters Signup and view all the answers

Which type of threat involves unauthorized access to data or systems?

Logical Threats Signup and view all the answers

What is an example of a human threat to computer and network systems?

Social engineering Signup and view all the answers

Which category of threats includes malicious acts by individuals or groups?

Intentional Threats Signup and view all the answers

What is an example of a partner threat to computer and network systems?

Vendors with access to systems or data Signup and view all the answers

What is a type of malware that encrypts data and demands payment for decryption?

Ransomware Signup and view all the answers

What is an example of a physical threat to computer and network systems?

Theft or vandalism of equipment Signup and view all the answers

Which type of threat involves accidental data breaches or leaks?

Unintentional Threats Signup and view all the answers

What is a type of attack that exploits vulnerabilities in database systems?

SQL Injection Signup and view all the answers

What is the primary purpose of cryptography?

To secure communication in the presence of third-party adversaries Signup and view all the answers

Which type of cryptography uses a pair of keys?

Asymmetric Cryptography Signup and view all the answers

What is the purpose of digital signatures?

To verify the authenticity and integrity of a message Signup and view all the answers

What is the goal of confidentiality in cryptography?

To protect data from unauthorized access Signup and view all the answers

What is a brute force attack?

Trying all possible keys to decrypt the data Signup and view all the answers

What is the purpose of digital certificates?

To verify the identity of a user or device Signup and view all the answers

What is the goal of integrity in cryptography?

To ensure data is not modified or tampered with Signup and view all the answers

What is the type of cryptography that uses the same key for encryption and decryption?

Symmetric Cryptography Signup and view all the answers

What is the purpose of encryption in cryptography?

To convert plaintext to unreadable ciphertext Signup and view all the answers

What is the goal of non-repudiation in cryptography?

To ensure that a sender cannot deny sending a message Signup and view all the answers

What is the primary purpose of SSL?

To provide secure communication between a web browser and a web server Signup and view all the answers

What is the purpose of a digital signature?

To authenticate the sender of a message Signup and view all the answers

What type of encryption does SSL use?

Asymmetric encryption Signup and view all the answers

What is the role of a Certificate Authority (CA)?

To verify the identity of entities requesting digital certificates Signup and view all the answers

What is the purpose of a digital certificate?

To contain the public key and identity information of an entity Signup and view all the answers

What is the purpose of a Root CA?

To be trusted by default by most browsers and operating systems Signup and view all the answers

What is the purpose of TCP port 443?

To provide secure communication between a web browser and a web server Signup and view all the answers

What is the benefit of using digital signatures?

To ensure integrity and authenticity of data Signup and view all the answers

What type of CA issues certificates on behalf of a root CA?

Intermediate CA Signup and view all the answers

What is the primary function of SSL in securing communication between a web browser and a web server?

Encrypting the data transmitted between the browser and server Signup and view all the answers

What is the purpose of a digital signature in a digital certificate?

To authenticate the identity of the sender of a message Signup and view all the answers

What is the role of a Certificate Authority (CA) in issuing digital certificates?

To act as a trusted third-party that verifies the identity of the entity requesting a certificate Signup and view all the answers

What is the purpose of port 443 in SSL communication?

To facilitate secure communication between the browser and server Signup and view all the answers

What is the benefit of using digital signatures in digital certificates?

To prevent tampering and ensure non-repudiation Signup and view all the answers

What is the relationship between SSL and TLS?

TLS replaced SSL in 2015 Signup and view all the answers

What is the primary function of a digital certificate issued by a CA?

To verify the identity of the website or organization Signup and view all the answers

What is the purpose of a pair of keys in digital signatures?

To sign and verify the authenticity of the message or document Signup and view all the answers

Which layer of the OSI model does SSL operate at?

Presentation layer Signup and view all the answers

What is the purpose of a digital signature?

To authenticate the sender and ensure data integrity Signup and view all the answers

What type of cryptography is used in digital signatures?

Asymmetric cryptography Signup and view all the answers

What is the role of a Certificate Authority (CA)?

To issue digital certificates Signup and view all the answers

What is the primary purpose of SSL?

To provide end-to-end communication security over a network Signup and view all the answers

What is the primary role of a Certificate Authority (CA)?

To issue digital certificates containing the public key and identity information Signup and view all the answers

What is the main purpose of a digital signature?

To ensure the sender's identity and message integrity Signup and view all the answers

What type of CA is at the top of the trust hierarchy?

Root CA Signup and view all the answers

What is the primary purpose of SSL?

To secure communication between a web browser and a web server Signup and view all the answers

What is the benefit of using digital signatures?

Ensures integrity and non-repudiation Signup and view all the answers

Which type of CA issues certificates on behalf of a root CA?

Intermediate CA Signup and view all the answers

What is the primary purpose of the Transport Layer Security (TLS) protocol?

To provide a secure communication between a web browser and a web server Signup and view all the answers

What is the main benefit of using digital signatures in secure communication?

To provide a means of authentication and integrity Signup and view all the answers

What is the role of a Certificate Authority (CA) in public-key infrastructure?

To issue digital certificates to verify the identity of entities Signup and view all the answers

What is the primary function of the encryption component in SSL/TLS?

To protect data from eavesdropping and tampering Signup and view all the answers

What is the purpose of the hash function in the digital signature process?

To create a unique digest of the message Signup and view all the answers

What is the relationship between a Certificate Authority (CA) and a Root CA?

A Root CA is a trusted entity that issues certificates to a CA Signup and view all the answers

What is the benefit of using SSL/TLS in website communication?

To protect data from eavesdropping and tampering Signup and view all the answers

What is the purpose of the digital certificate in SSL/TLS?

To verify the identity of the entity and provide a public key Signup and view all the answers

What is the primary goal of the integrity component in SSL/TLS?

To ensure the data is not modified during transmission Signup and view all the answers

What is the primary purpose of the Digital Security Act, 2018 in Bangladesh?

To prevent and combat cybercrimes, including malware attacks Signup and view all the answers

What does Section 17 of the Digital Security Act, 2018 prohibit?

Unauthorized access to computer systems, networks, or data Signup and view all the answers

What is the penalty for intentionally spreading malware or viruses according to the Digital Security Act, 2018?

Imprisonment and fines Signup and view all the answers

What is required of banks and other organizations according to Section 21 of the Digital Security Act, 2018?

To implement robust security measures to prevent cyber-attacks Signup and view all the answers

What is one of the measures to prevent malware attacks in banks according to the Digital Security Act, 2018?

All of the above Signup and view all the answers

What is one of the best practices for banks to comply with the Digital Security Act, 2018?

Implement a defense-in-depth approach to security Signup and view all the answers

Why is encryption recommended in the Digital Security Act, 2018?

To prevent unauthorized access to sensitive data Signup and view all the answers

What is the purpose of conducting regular security testing and vulnerability assessments according to the Digital Security Act, 2018?

To identify vulnerabilities and implement measures to address them Signup and view all the answers

What is the purpose of limiting access to sensitive data and systems in the Digital Security Act, 2018?

To prevent unauthorized access to sensitive data and systems Signup and view all the answers

What is one of the measures to prevent malware attacks in banks according to the Digital Security Act, 2018?

All of the above Signup and view all the answers

What is the primary focus of the Digital Security Act, 2018?

Enhancing the digital security posture of banks and financial institutions Signup and view all the answers

What is one of the key provisions of the Digital Security Act, 2018?

Establishing a cybersecurity governance framework Signup and view all the answers

What is the purpose of the incident response plan in the Digital Security Act, 2018?

To respond promptly and effectively in the event of a malware attack or other cyber incident Signup and view all the answers

Why is it important for banks to assess and manage the cybersecurity risks associated with third-party service providers?

To mitigate the risk of cyber threats from third-party service providers Signup and view all the answers

What is the purpose of regular cybersecurity awareness programs for employees?

To educate employees on the risks and consequences of malware attacks Signup and view all the answers

What is the benefit of information sharing between banks and financial institutions?

To enhance the overall cybersecurity posture of the sector Signup and view all the answers

What is a key aspect of risk management in the Digital Security Act, 2018?

Identifying, assessing, and mitigating cyber threats Signup and view all the answers

What is the purpose of a robust risk management framework in the Digital Security Act, 2018?

To identify, assess, and mitigate cyber threats Signup and view all the answers

What is an important aspect of cybersecurity governance in the Digital Security Act, 2018?

Establishing a cybersecurity governance framework Signup and view all the answers

Why is cybersecurity awareness important in the Digital Security Act, 2018?

To educate employees on the risks and consequences of malware attacks Signup and view all the answers

What does multi-factor authentication (MFA) aim to ensure in e-banking systems?

Only authorized users access e-banking systems Signup and view all the answers

What is the primary purpose of encryption in e-banking?

To encrypt data in transit Signup and view all the answers

What type of attack involves fraudulent emails, texts, or messages to trick users into revealing sensitive information?

Phishing Signup and view all the answers

What is the purpose of data loss prevention (DLP) techniques in e-banking?

To prevent unauthorized data exfiltration Signup and view all the answers

What is the primary goal of incident response plans in e-banking?

To quickly respond to security breaches Signup and view all the answers

What is the purpose of user education and awareness programs in preventing social engineering attacks?

To educate users about social engineering attacks and prevent them Signup and view all the answers

What is the primary goal of disaster recovery plans in e-banking?

To ensure business continuity in the event of a disaster Signup and view all the answers

What is the purpose of secure communication protocols in e-banking?

To protect data in transit Signup and view all the answers

What is the purpose of intrusion detection and prevention systems (IDPS) in e-banking?

To detect and block malicious activity Signup and view all the answers

What is the primary purpose of encryption in e-banking?

To protect data in transit and at rest Signup and view all the answers

What is the primary goal of using two-factor authentication in e-banking?

To add an extra layer of security Signup and view all the answers

What is the primary goal of keeping software and systems up-to-date in e-banking?

To prevent exploitation of known vulnerabilities Signup and view all the answers

What is the primary goal of being cautious of suspicious emails, messages, or calls in e-banking?

To reduce the risk of phishing attacks Signup and view all the answers

What is the primary goal of using strong passwords and keeping them confidential in e-banking?

To reduce the risk of unauthorized access Signup and view all the answers

What is the primary purpose of Two-Factor Authentication (2FA) in e-banking?

To provide an additional layer of security beyond passwords Signup and view all the answers

What is the most common form of social engineering attack used in e-banking?

Phishing Signup and view all the answers

What is the main difference between phishing and vishing?

The method of delivery Signup and view all the answers

What is the primary goal of IT security measures in e-banking?

To reduce the risk of cyber attacks Signup and view all the answers

What is the purpose of smishing in social engineering?

To trick customers into revealing sensitive information through SMS or text messages Signup and view all the answers

What is the purpose of two-factor authentication (2FA) in e-banking?

To provide an additional layer of security beyond username and password Signup and view all the answers

Which of the following is a type of social engineering attack?

Phishing Signup and view all the answers

What is the primary goal of a Security Operations Centre (SOC) in social engineering defense?

To monitor for social engineering attempts and respond to incidents Signup and view all the answers

Which of the following IT security measures is used to protect sensitive data?

Encryption Signup and view all the answers

What is the purpose of regular security audits and testing in e-banking?

To detect vulnerabilities and identify risks Signup and view all the answers

Which of the following is a defense against social engineering attacks?

User awareness and education Signup and view all the answers

What is the purpose of role-based access control (RBAC) in e-banking?

To restrict access to authorized personnel Signup and view all the answers

Which of the following is an example of a social engineering attack?

Phishing attack Signup and view all the answers

What is the primary goal of incident response in e-banking?

To respond swiftly to security breaches Signup and view all the answers

Which of the following is a type of IT security measure used in e-banking?

Secure Sockets Layer (SSL) Signup and view all the answers

What is the primary function of a Security Operations Centre (SOC)?

To monitor, detect, and respond to cybersecurity threats in real-time Signup and view all the answers

Which of the following is a key function of a Security Operations Centre (SOC)?

Managing incident response Signup and view all the answers

What is the role of a Security Analyst in a Security Operations Centre (SOC)?

To monitor systems, analyze logs, and respond to security incidents Signup and view all the answers

What is the purpose of a Security Information and Event Management (SIEM) System in a Security Operations Centre (SOC)?

To collect, monitor, and analyze log data from various sources Signup and view all the answers

Who is responsible for overseeing SOC operations and managing resources in a Security Operations Centre (SOC)?

SOC Managers Signup and view all the answers

What is the role of a Threat Hunter in a Security Operations Centre (SOC)?

To proactively search for unknown threats and vulnerabilities Signup and view all the answers

What is the primary goal of incident response in a Security Operations Centre (SOC)?

To contain and mitigate security incidents Signup and view all the answers

What is the purpose of Security Orchestration, Automation, and Response (SOAR) Tools in a Security Operations Centre (SOC)?

To automate and streamline incident response processes Signup and view all the answers

What is the primary responsibility of an Incident Responder in a Security Operations Centre (SOC)?

To handle incident response, containment, and eradication activities Signup and view all the answers

What is the purpose of Intrusion Detection Systems (IDS) in a Security Operations Centre (SOC)?

To identify potential security threats in real-time Signup and view all the answers

Study Notes

Information Security

Definition

Information security refers to the practices and technologies designed to protect digital information from unauthorized access, use, disclosure, disruption, modification, or destruction.

Goals

Confidentiality: Protecting sensitive information from unauthorized access or viewing.
Integrity: Ensuring that data is accurate, complete, and not modified without authorization.
Availability: Ensuring that data is accessible and usable when needed.

Threats

Unauthorized Access: Unauthorized access to sensitive information or systems.
Malware: Malicious software, such as viruses, worms, and Trojan horses, designed to harm or exploit systems.
Denial of Service (DoS): Overwhelming a system with traffic to make it unavailable.
Insider Threats: Authorized personnel misusing access privileges.
Physical Threats: Unauthorized physical access to systems or facilities.

Security Controls

Administrative Controls: Policies, procedures, and guidelines governing information security.
Technical Controls: Firewalls, intrusion detection systems, encryption, and access controls.
Physical Controls: Locks, fences, surveillance cameras, and alarms.

Security Measures

Authentication: Verifying the identity of users, devices, or systems.
Authorization: Controlling access to resources based on user identity and permissions.
Encryption: Protecting data in transit or at rest using encryption algorithms.
Firewalls: Network devices controlling incoming and outgoing network traffic.
Intrusion Detection and Prevention Systems (IDPS): Monitoring and blocking malicious traffic.

Risk Management

Risk Assessment: Identifying and evaluating potential security risks.
Risk Mitigation: Implementing controls to reduce or eliminate risks.
Incident Response: Responding to security incidents, such as breaches or attacks.

Studying That Suits You

Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

Description

Learn about the definition, goals, threats, security controls, security measures, and risk management in information security. Understand the concepts of confidentiality, integrity, and availability, and how to protect digital information from unauthorized access.

IT Chapter-6

Choose a study mode

Podcast

Questions and Answers

What is the primary goal of confidentiality in information security?

What type of threat involves authorized personnel misusing access privileges?

Which security control involves policies, procedures, and guidelines governing information security?

What is the primary goal of availability in information security?

Which security measure involves verifying the identity of users, devices, or systems?

What type of threat involves overwhelming a system with traffic to make it unavailable?

What type of security control involves the use of locks, fences, and surveillance cameras?

What is the primary goal of integrity in information security?

Which security measure involves controlling access to resources based on user identity and permissions?

What type of threat involves malicious software, such as viruses, worms, and Trojan horses?

What is the primary objective of information security?

Which of the following is NOT a type of threat to information security?

What is the primary goal of risk assessment in risk management?

Which type of control is used to prevent unauthorized physical access to information systems?

What is the primary goal of incident response in risk management?

Which type of threat involves the unintentional exposure of sensitive information?

What is the primary goal of technical controls in information security?

Which of the following is a type of security control?

What is the primary goal of risk mitigation in risk management?

Which of the following is NOT a key concept of information security?

What is an example of a physical threat to computer and network systems?

Which type of threat involves unauthorized access to data or systems?

What is an example of a human threat to computer and network systems?

Which category of threats includes malicious acts by individuals or groups?

What is an example of a partner threat to computer and network systems?

What is a type of malware that encrypts data and demands payment for decryption?

What is an example of a physical threat to computer and network systems?

Which type of threat involves accidental data breaches or leaks?

What is a type of attack that exploits vulnerabilities in database systems?

What is the primary purpose of cryptography?

Which type of cryptography uses a pair of keys?

What is the purpose of digital signatures?

What is the goal of confidentiality in cryptography?

What is a brute force attack?

What is the purpose of digital certificates?

What is the goal of integrity in cryptography?

What is the type of cryptography that uses the same key for encryption and decryption?

What is the purpose of encryption in cryptography?

What is the goal of non-repudiation in cryptography?

What is the primary purpose of SSL?

What is the purpose of a digital signature?

What type of encryption does SSL use?

What is the role of a Certificate Authority (CA)?

What is the purpose of a digital certificate?

What is the purpose of a Root CA?

What is the purpose of TCP port 443?

What is the benefit of using digital signatures?

What type of CA issues certificates on behalf of a root CA?

What is the primary function of SSL in securing communication between a web browser and a web server?

What is the purpose of a digital signature in a digital certificate?

What is the role of a Certificate Authority (CA) in issuing digital certificates?

What is the purpose of port 443 in SSL communication?

What is the benefit of using digital signatures in digital certificates?

What is the relationship between SSL and TLS?

What is the primary function of a digital certificate issued by a CA?

What is the purpose of a pair of keys in digital signatures?

Which layer of the OSI model does SSL operate at?

What is the purpose of a digital signature?

What type of cryptography is used in digital signatures?

What is the role of a Certificate Authority (CA)?

What is the primary purpose of SSL?

What is the primary role of a Certificate Authority (CA)?

What is the main purpose of a digital signature?

What type of CA is at the top of the trust hierarchy?

What is the primary purpose of SSL?

What is the benefit of using digital signatures?

Which type of CA issues certificates on behalf of a root CA?

What is the primary purpose of the Transport Layer Security (TLS) protocol?

What is the main benefit of using digital signatures in secure communication?

What is the role of a Certificate Authority (CA) in public-key infrastructure?

What is the primary function of the encryption component in SSL/TLS?

What is the purpose of the hash function in the digital signature process?

What is the relationship between a Certificate Authority (CA) and a Root CA?

What is the benefit of using SSL/TLS in website communication?

What is the purpose of the digital certificate in SSL/TLS?

What is the primary goal of the integrity component in SSL/TLS?