stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
BTEC DIT Topic B Cyber Security Flashcards | StudBud
Explore
/
BTEC DIT Topic B Cyber Security
BTEC DIT Topic B Cyber Security
45 terms
·
StudBud Administration
·
462 plays
Imported from external platform
Flashcards
45 cards
F
Practice quiz
P
Host live
L
Questions
45
Answers
1
What kind of threats can disaster recovery policies help to protect us from being impacted by?
Hardware failure
All of the above.
Natural disasters
Malware
2
Which of the following are common ways of disrupting an online shopping website? Choose two options.
Denial-of-Service Attacks
Website Defacement
Ransomware
Stealing Customer Data
3
Below are listed several impacts of a security breach. Match the impacts with the example attacks listed.Legal Action
A database of customer data is stolen and leaked publically online.
A DOS attack is performed on a website, causing the web server to crash.
Malware infects a computer system, destroying business financial records.
You are fined due to not having proper security in place to protect data.
4
The term “Malware” and “Virus” mean the same thing.
False
True
5
A “hot site” is a location that a business can instantly switch business operation over to after a disaster.
True
False
6
Users should only be given the level of access they required in order to complete their job. What do we know this as?
Principle of Least Purpose
Principle of Least Rights
Principle of Least Privilege
Principle of Least Need
7
Why is it important to assign responsibilities for implementing cybersecurity policies? Choose two options.
So we know who created the cybersecurity policy.
So people are aware of the actions that they must take.
So we know who is accountable if something hasn't been implemented.
So we know what actions must be put in place.
8
How might visiting an untrustworthy website lead to a security threat? Choose two options.
The site may contain offensive material which will upset the employee.
Downloads from the site might infect the user's system with malware.
The site may trick users into revealing information.
The site might be a whistleblowing site for leaking information.
9
What is the major difference between a worm and a virus?
Viruses attach to a legitimate piece of software or file in order to spread
Worms attach to a legitimate piece of software or file in order to spread.
A viruses goal is to monitor a user’s actions to steal personal information
A worms goal is to monitor a user’s actions in order to steal personal info
10
Why is stored data encrypted?
So you don't have to password protect it.
To protect it from viruses.
You don't encrypt stored data.
If data is stolen it is still unreadable.
11
Which of the following is the most common example of a social engineering threat?
Phishing
Man-in-the-Middle Attacks
Viruses
Pharming
12
Cybersecurity attacks are always committed for financial gain.
False
True
13
Which of the following are examples of physical security methods?Choose two options.
Levels of Access
CCTV
Two Factor Authentication
Locked Cabinets
14
What do we mean by “social engineering”?
Manipulating individuals into handing over private information.
Gaining access to a system without the permission of the owner.
Inserting yourself into the middle of a communication between two parties.
Misdirecting users to a fraudulent/fake website without users knowledge.
15
What is the purpose of the disaster recovery policy?
Performing regular backups of all data.
Analysing the cause of attacks and identifying improvements to procedures.
Preventing cybersecurity incidents from occurring.
Ensuring damage is quickly recovered from after an incident.
16
What type of threat can obscuring data entry protect us from?
Phishing
Shoulder Surfing
Trojans
Spyware
17
Why might someone intentionally steal or leak information? Choose two options.
Being disgruntled due to being made redundant.
Whistleblowing over illegal practices.
Due to visiting an untrustworthy website.
By mistake due to a phishing attack.
18
Biometrics such as fingerprints can sometimes be used instead of passwords.What are the benefits of bio. over pass. (2)
Biometrics are not changeable and so cannot be reset.
Users have accountability as physical traits can't be stolen.
Biometrics are cheaper and easier to purchase and install.
Users do not have to remember and enter a security string.
19
Below are listed several impacts of a security breach. Which one matches - Damage to Public Image
A DOS attack is performed on a website, causing the web server to crash.
A database of customer data is stolen and leaked publically online.
Malware infects a computer system, destroying business financial records.
You are fined due to not having proper security in place to protect data.
20
Which two of the following are common rules that you must follow to ensure a password is secure? Choose two options.
Must contain uppercase & lowercase letters, numbers & symbols.
Must contain dictionary words or names.
Must be a maximum of 8 characters in length.
Must not be reused on multiple different systems.
21
Which of the following are examples of deliberate internal threats? Choose two options.
Users overriding security controls
Use of portable storage devices
Visiting untrustworthy websites
Stealing or leaking of information
22
Which of the following are non-financial examples of why cybersecurity attacks are performed? Choose two options.
Overcome personal goals of beating an organisation’s cybersecurity measures
Stealing intellectual property from a rival business.
As revenge by employees who feel mistreated by a business.
Stealing customer financial data.
23
What is the disadvantage to implementing security features into your interface design?
It may worsen ease-of-use & accessibility.
It can increase the need for stringent security measures.
It has to be regularly maintained and updated.
It can be resource intensive and slow your computer.
24
Which of the following are good practice for setting a password in a password policy? Choose two options.
A variety of upper-case & lower case letters, numbers and characters
It should be something easy to remember, like a word or some personal info
It should be written down near your computer in case you ever forget it.
It should be at least 8 characters in length.
25
Which of the following are common examples of malware threats?Choose two options.
Botnet
Wormnet
Spyware
Hacking
26
A “stay logged in” feature can both positively and negatively affect your systems security.
False
True
27
What is a password?
A secret string of text used to secure and control access to a system
A secret string of numbers used to secure and control access to a system
A secret string of characters used to secure and control access to a system
A secret string of symbols used to secure and control access to a system
28
Below are listed several impacts of a security breach. Match the impacts with the example attacks listed.Data Loss
A database of customer data is stolen and leaked publically online.
Malware infects a computer system destroying business financial records.
You are fined due to not having proper security in place to protect data
A DOS attack is performed on a website, causing the web server to crash.
29
Which of the following attacks are commonly used to extort money from an organisation?Choose two options.
Phishing
Denial-of-Service Attacks
Hacking
Ransomware
30
Match the external threat to the definition: Man-in-the-Middle
Where a malicious user inserts themselves into the middle of communication.
Misdirects users to a fraudulent/fake website without the users knowledge.
Where servers are flooded with traffic to overwhelm it and take it down.
31
Match the external threat with the definition: Denial-of-Service
Misdirects users to a fraudulent/fake website without their knowledge.
Where a malicious user inserts themselves into the middle of communication.
Where servers are flooded with traffic to overwhelm it and take it down.
32
Which of the following is a disadvantage of two-factor authentication (2FA)?
Doesn’t prevent access to data, only limits the damage that can be caused.
2FA is not changeable, so if compromised in a breach they cant be reset
Logging into a system may take a lot longer which can be frustrating.
2FA can be expensive to initially purchase and install due to its special
33
How does ransomware usually lock victims out of their files?
By copying the data.
By encrypting the data.
By stealing the data.
By deleting the data.
34
Below are terms relating to encryption. Match encrytion key with its definition.
The process performed to encrypt the plain-text data.
The plain-text data after it has been encrypted.
An encryption technology commonly used on websites.
A unique string that is used to ensure the encryption output is unique.
35
What is the difference between a white hat hacker and a black hat hacker?
A white hat hacker only reads or copies data when they gain access to it
A black hat hacker only reads or copies data when they gain access to it
A black hat hacker is hired by to hack their own system to test security.
A white hat hacker is hired by businesses to hack their own system to test
36
Below are terms relating to encryption. Match SSL with its definition.
The plain-text data after it has been encrypted.
The process performed to encrypt the plain-text data.
An encryption technology commonly used on websites.
A unique string that is used to ensure the encryption output is unique.
37
What are the disadvantages of anti-virus software?Choose two options.
It can only detect viruses, not other types of malware like trojans.
It must be regularly maintained and updated.
Running a scan can cause your computer to run slowly.
It is extremely expensive and difficult to install.
38
How might an employee unintentionally disclose data? Choose two options.
Whistleblowing over illegal practices.
Due to spyware being installed on their system.
By overriding security controls.
Being tricked by a phishing email.
39
Which of the following would be included in a disaster recovery policy? Choose two options.
Establishing the severity of the attack
Timeline for data recovery
Analysis of the cause of the disaster
Definition of the backup process
40
What software is used to scan for and remove malicious software from your computer?
Firewall
Encryption
Anti-Virus
Interface Design
41
Below are listed several impacts of a security breach. Match the impacts with the example attacks listed.Downtime
You are fined due to not having proper security in place to protect data.
Malware infects a computer system, destroying business financial records.
A DOS attack is performed on a website, causing the web server to crash.
A database of customer data is stolen and leaked publically online.
42
In an acceptable software policy, who is usually responsible for installing software?
Senior Management
Maintenance Staff
IT Support Staff
Admin Staff
43
What is the benefit of real-time protection over on-demand scans?
Real-time protection can detect all forms of malware.
Real-time protection can detect malware more effectively.
Real-time protection can prevent malware from infecting your system.
Real-time protection can scan your entire hard disk much quicker.
44
Which of the following are examples of accidental internal threats? Choose two options.
Visiting untrustworthy websites
Shoulder surfing
Stealing or leaking of information
Downloads from the internet
45
Which of the following are benefits of setting the correct level of access required for each user? Choose two options.
Reduces the likelihood of human error damaging data.
Prevents attackers from accessing any files on the system.
Reduces the impact of a cybersecurity incident.
Simple and easy to set up for system administrators.
