Introduction to Cybersecurity

Access controls aim to limit access to sensitive data and systems based on user roles and permissions, ensuring only authorized individuals can access information.

Confidentiality, Integrity, and Availability.

Authentication verifies a user's identity, while authorization determines what actions that verified user is permitted to perform.

<p>NIST Cybersecurity Framework and ISO/IEC 27001.</p> Signup and view all the answers

<p>The CIS Controls are a prioritized set of actions that organizations can take to address and mitigate cyber risks.</p> Signup and view all the answers

<p>Financial losses, reputational damage, and operational disruptions.</p> Signup and view all the answers

<p>The continuous development of sophisticated cyberattacks requires constant adaptation and improvement of security measures.</p> Signup and view all the answers

<p>AI and ML are being used to proactively detect and respond to threats, analyze large datasets for suspicious activity, and automate security tasks.</p> Signup and view all the answers

<p>Security education helps users understand their role in protecting sensitive information and how to identify and avoid potential threats.</p> Signup and view all the answers

<p>Technical expertise is essential for implementing and maintaining secure systems, developing effective countermeasures, and staying abreast of new threats and vulnerabilities.</p> Signup and view all the answers

<p>A virus typically requires user interaction to spread, like opening an infected file. A worm, however, can self-propagate through networks without user intervention.</p> Signup and view all the answers

<p>Phishing involves deceitful attempts to acquire sensitive information, often through fake emails or websites. Protection measures include being wary of suspicious links, verifying the sender's identity, and using strong passwords.</p> Signup and view all the answers

<p>DoS attacks overwhelm a system with excessive traffic, making it unavailable to legitimate users. The impact includes service disruption, productivity loss, and potential financial damage.</p> Signup and view all the answers

<p>Firewalls act as security checkpoints, examining inbound and outbound network traffic and blocking unauthorized access based on defined rules.</p> Signup and view all the answers

<p>Data encryption transforms data into an unreadable format, protecting it from unauthorized access even if intercepted. It strengthens privacy and confidentiality.</p> Signup and view all the answers

<p>Security awareness training educates employees about cyber threats, best practices, and responsible computing habits, reducing the risk of human error in security breaches.</p> Signup and view all the answers

<p>Software updates address known vulnerabilities and security flaws, patching them to prevent exploitation by attackers.</p> Signup and view all the answers

<p>A zero-day exploit targets vulnerabilities unknown to the software vendor, allowing attackers to exploit them before a patch is available. This poses significant risk due to the lack of immediate countermeasures.</p> Signup and view all the answers

<p>Strong passwords make it harder for attackers to guess or crack, protecting accounts. Key principles include using a mix of uppercase, lowercase, numbers, and symbols, avoiding common words or personal information.</p> Signup and view all the answers

<p>IDS detects suspicious activity but doesn't prevent it; IPS can block or mitigate threats in real-time. They work together to offer a layered defense strategy.</p> Signup and view all the answers

Technologies and practices protecting systems, networks, and data from threats.

Malicious software designed to damage or disable computer systems.

Deceptive practice to trick individuals into revealing sensitive info.

Attack aimed at making a resource unavailable by overwhelming it.

Interception of communication between two parties without their knowledge.

Exploiting vulnerabilities in SQL databases for unauthorized access.

Employees or contractors compromising security intentionally/unintentionally.

Attacks based on vulnerabilities unknown to the vendor.

Security method using multiple forms of verification to access accounts.

Encoding data to protect it during transmission or storage.

Limiting access to sensitive data based on user roles and permissions.

Ensuring sensitive information is only accessible to authorized individuals.

Maintaining the accuracy and completeness of data.

Ensuring authorized users have access to necessary information and resources.

Verifying the identity of users attempting to access a system.

Determining what actions a user is allowed to perform.

A voluntary framework for managing cybersecurity risk.

An international standard for information security management.

Direct costs related to responding to cyber incidents.

The theft or disclosure of sensitive personal information.