BTEC DIT Component 3: Threats to data

Question 1

Which of the following are common ways of disrupting an online shopping website?

Accepted Answer

Denial-of-Service Attacks, Website Defacement

Question 2

A grey-hat hacker is someone that a business hires to identify vulnerabilities and suggest improvements

Accepted Answer

False

Question 3

What do we mean by “social engineering”?

Accepted Answer

Manipulating individuals into handing over private information.

Question 4

Which of the following are non-financial examples of why cybersecurity attacks are performed?

Accepted Answer

Trying to out do an organisation’s cybersecurity measures, Revenge by employees who feel mistreated by a business.

Question 5

Which of the following are examples of deliberate internal threats?

Accepted Answer

Users overriding security controls, Stealing or leaking of information

Question 6

Which of the following are common examples of malware threats?

Accepted Answer

Botnet, Spyware

Question 7

The term “Malware” and “Virus” mean the same thing.

Accepted Answer

False

Question 8

What is the difference between a white hat hacker and a black hat hacker?

Accepted Answer

A white hat hacker is hired by a business to test hack

Question 9

How might visiting an untrustworthy website lead to a security threat?

Accepted Answer

Downloads might infect the user's system with malware., The site may trick users into revealing information.

Question 10

How might an employee unintentionally disclose data?

Accepted Answer

Due to spyware being installed on their system., Being tricked by a phishing email.

Question 11

Why might someone intentionally steal or leak information?

Accepted Answer

Whistleblowing over illegal practices., Being disgruntled due to being made redundant.

Question 12

How does ransomware usually lock victims out of their files?

Accepted Answer

Locks victim out from accessing their data

Question 13

Why is stored data encrypted?

Accepted Answer

If data is stolen it is still unreadable.

Question 14

Cybersecurity attacks are always committed for financial gain.

Accepted Answer

False

Question 15

Which of the following would count as a remote backup?

Accepted Answer

A USB stick kept in another building., A cloud storage server.

Question 16

What are two common vulnerabilities identified by penetration testing?

Accepted Answer

Out of date software., Open network ports.

Question 17

Which of the following are examples of accidental internal threats?

Accepted Answer

Visiting untrustworthy websites, Downloads from the internet

Question 18

Which of the following attacks are commonly used to extort money from an organisation?

Accepted Answer

Phishing, Ransomware

Question 19

Which of the following is the most common example of a social engineering threat?

Accepted Answer

Phishing

Question 20

What's the main difference between viruses and worms?

Accepted Answer

Viruses attach themselves to software or file in order to spread.

Question 21

How frequently should backups be taken?

Accepted Answer

Depends on the business & data.

Questions 21