stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Recognizing and Preventing Cyber Threats Flashcards | StudBud
Explore
/
Recognizing and Preventing Cyber Threats
Recognizing and Preventing Cyber Threats
24 terms
·
StudBud Administration
·
17 plays
Imported from external platform
Flashcards
24 cards
F
Practice quiz
P
Host live
L
Questions
24
Answers
1
Who should do the mandatory Vistra Corp. Compliance Trainings?
New hires only
All Vistra Employees
IT Compliance
Employees who have not taken the training before
2
When bad emails are reported, Microsoft Outlook can remove the reported messages from everyone's inbox at Vistra.
False
True
3
Ransomware attacks are on the rise, attackers targeting data encryption, data theft and extortion.
False
True
4
Social engineering uses human emotion (usually fear & urgency) to trick the target into divulging sensitive information.
False
True
5
What is the primary purpose of cybersecurity awareness training in the workplace?
To increase employee productivity
To educate employees about cybersecurity risks and best practices
To teach employees advanced programming skills
To encourage employees to take longer breaks
6
When using public Wi-Fi networks in the workplace, what should employees do to protect sensitive data?
Use a virtual private network (VPN)
Log in to as many accounts as possible to save time
Share sensitive data freely
Disable all security features on their devices
7
At Vistra, how many weeks are regularly allowed to complete trainings?
3 weeks
1 month
2 weeks
1 week
8
The most vulnerable point in our cybersecurity infrastructure is
Deepfakes
Humans
Data Disposal
Generative AI Threats
9
What is the purpose of regular software updates and patches in the workplace?
To replace existing software with new versions
To fix security vulnerabilities and bugs
To add new features
To slow down computers
10
Threat intelligence is data that is collected and analyzed to understand a threat actor's motives and attack behaviors.
True
False
11
Which of the following is a common example of a strong password policy in the workplace?
Sharing passwords with colleagues for convenience
Changing passwords every 90 days
Using the same password for all work-related accounts
Writing passwords on sticky notes and leaving them on the desk
12
What happens if I fail the Phishing Email Test?
I will have to attend mandatory training
I will meet with HR
I will have to eat lunch with the Compliance Team for a week
I will stop opening my emails to avoid failing the test again
13
At Vistra, what is the email for the cyber compliance team?
[email protected]
[email protected]
[email protected]
[email protected]
14
At Vistra, how many standards does the Cybersecurity Policy have?
14
11
15
7
15
What should employees do if they receive an email from an unknown sender with a suspicious attachment in the workplace?
Forward the email to their colleagues
Open the attachment to see what it contains
Reply to the email asking for more information
Send to the report phishing link.
16
User access controls provokes the risk of inappropriate access to Technology Assets and Information.
True
False
17
Zero Trust Architecture (ZTA) is an approach that assumes no trust within or outside an organization's network.
False
True
18
What is the role of an IT Department in preventing cyber threats in the workplace?
To create more cyber threats for employees to deal with
To encourage employees to click on suspicious links
To enforce strict password policies
To educate employees about cyber risks and provide technical solutions
19
At Vistra, how is data classified?
High, Medium, and Low
Public, Private, Personal, & Sensitive
Internal, Public, Confidential, Restricted
Community, Privileged, Individual, & Domestic
20
Which of the following is an example of a social engineering attack that could target employees in the workplace?
A suspicious email asking an employee to reset their password
A person claiming to work for the company requesting sensitive information
All of the above
An email with a link to a suspiciuous website and/or attachment
21
What is the first step employees should take if they suspect a security breach in the workplace?
Confront the suspected attacker
Post about it on social media
Ignore the issue and hope it goes away
Report the incident to the IT Department or a designated authority
22
The Internet of Things (IoT) is...
Things on the internet
A network of technolgy that has separate encryption methods.
Network of linked devices & technology that aids exchange between them
Cyber attacks targeting 3rd party vendors
23
Who should you contact if you suspect your computer was infected with malware?
IT Compliance
Cyber Risk
CISO
Security Operations
24
What does "phishing" refer to in the context of cybersecurity threats in the workplace?
A method of improving email communication
A type of office party
A social engineering attack that tricks people into revealing information
A way to organize digital files
