stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
BTEC DIT Topic B Cyber Security Flashcards | StudBud
Explore
/
BTEC DIT Topic B Cyber Security
BTEC DIT Topic B Cyber Security
45 terms
·
StudBud Administration
·
462 plays
Imported from external platform
Flashcards
45 cards
F
Practice quiz
P
Host live
L
Questions
45
Answers
1
Which of the following is a disadvantage of two-factor authentication (2FA)?
Doesn’t prevent access to data, only limits the damage that can be caused.
2FA is not changeable, so if compromised in a breach they cant be reset
2FA can be expensive to initially purchase and install due to its special
Logging into a system may take a lot longer which can be frustrating.
2
What is the major difference between a worm and a virus?
Viruses attach to a legitimate piece of software or file in order to spread
A worms goal is to monitor a user’s actions in order to steal personal info
A viruses goal is to monitor a user’s actions to steal personal information
Worms attach to a legitimate piece of software or file in order to spread.
3
Which of the following are non-financial examples of why cybersecurity attacks are performed? Choose two options.
Stealing intellectual property from a rival business.
Overcome personal goals of beating an organisation’s cybersecurity measures
Stealing customer financial data.
As revenge by employees who feel mistreated by a business.
4
Below are listed several impacts of a security breach. Match the impacts with the example attacks listed.Legal Action
A database of customer data is stolen and leaked publically online.
Malware infects a computer system, destroying business financial records.
You are fined due to not having proper security in place to protect data.
A DOS attack is performed on a website, causing the web server to crash.
5
Why is stored data encrypted?
You don't encrypt stored data.
So you don't have to password protect it.
To protect it from viruses.
If data is stolen it is still unreadable.
6
What is the benefit of real-time protection over on-demand scans?
Real-time protection can detect malware more effectively.
Real-time protection can scan your entire hard disk much quicker.
Real-time protection can detect all forms of malware.
Real-time protection can prevent malware from infecting your system.
7
A “hot site” is a location that a business can instantly switch business operation over to after a disaster.
True
False
8
How might visiting an untrustworthy website lead to a security threat? Choose two options.
Downloads from the site might infect the user's system with malware.
The site might be a whistleblowing site for leaking information.
The site may contain offensive material which will upset the employee.
The site may trick users into revealing information.
9
Which of the following are common examples of malware threats?Choose two options.
Botnet
Spyware
Hacking
Wormnet
10
Cybersecurity attacks are always committed for financial gain.
False
True
11
Below are listed several impacts of a security breach. Match the impacts with the example attacks listed.Downtime
Malware infects a computer system, destroying business financial records.
A DOS attack is performed on a website, causing the web server to crash.
A database of customer data is stolen and leaked publically online.
You are fined due to not having proper security in place to protect data.
12
Which of the following are common ways of disrupting an online shopping website? Choose two options.
Stealing Customer Data
Denial-of-Service Attacks
Ransomware
Website Defacement
13
Which of the following would be included in a disaster recovery policy? Choose two options.
Establishing the severity of the attack
Definition of the backup process
Analysis of the cause of the disaster
Timeline for data recovery
14
The term “Malware” and “Virus” mean the same thing.
False
True
15
Below are terms relating to encryption. Match encrytion key with its definition.
The process performed to encrypt the plain-text data.
A unique string that is used to ensure the encryption output is unique.
The plain-text data after it has been encrypted.
An encryption technology commonly used on websites.
16
Which of the following attacks are commonly used to extort money from an organisation?Choose two options.
Ransomware
Hacking
Denial-of-Service Attacks
Phishing
17
Below are listed several impacts of a security breach. Match the impacts with the example attacks listed.Data Loss
Malware infects a computer system destroying business financial records.
You are fined due to not having proper security in place to protect data
A database of customer data is stolen and leaked publically online.
A DOS attack is performed on a website, causing the web server to crash.
18
What is the purpose of the disaster recovery policy?
Performing regular backups of all data.
Ensuring damage is quickly recovered from after an incident.
Analysing the cause of attacks and identifying improvements to procedures.
Preventing cybersecurity incidents from occurring.
19
What software is used to scan for and remove malicious software from your computer?
Encryption
Interface Design
Anti-Virus
Firewall
20
What is a password?
A secret string of symbols used to secure and control access to a system
A secret string of text used to secure and control access to a system
A secret string of numbers used to secure and control access to a system
A secret string of characters used to secure and control access to a system
21
Match the external threat to the definition: Man-in-the-Middle
Where servers are flooded with traffic to overwhelm it and take it down.
Misdirects users to a fraudulent/fake website without the users knowledge.
Where a malicious user inserts themselves into the middle of communication.
22
Match the external threat with the definition: Denial-of-Service
Where a malicious user inserts themselves into the middle of communication.
Misdirects users to a fraudulent/fake website without their knowledge.
Where servers are flooded with traffic to overwhelm it and take it down.
23
Which of the following are examples of physical security methods?Choose two options.
Locked Cabinets
Two Factor Authentication
CCTV
Levels of Access
24
A “stay logged in” feature can both positively and negatively affect your systems security.
True
False
25
Below are listed several impacts of a security breach. Which one matches - Damage to Public Image
You are fined due to not having proper security in place to protect data.
Malware infects a computer system, destroying business financial records.
A database of customer data is stolen and leaked publically online.
A DOS attack is performed on a website, causing the web server to crash.
26
Why is it important to assign responsibilities for implementing cybersecurity policies? Choose two options.
So people are aware of the actions that they must take.
So we know what actions must be put in place.
So we know who created the cybersecurity policy.
So we know who is accountable if something hasn't been implemented.
27
How does ransomware usually lock victims out of their files?
By copying the data.
By encrypting the data.
By deleting the data.
By stealing the data.
28
Biometrics such as fingerprints can sometimes be used instead of passwords.What are the benefits of bio. over pass. (2)
Users have accountability as physical traits can't be stolen.
Biometrics are cheaper and easier to purchase and install.
Users do not have to remember and enter a security string.
Biometrics are not changeable and so cannot be reset.
29
Which of the following is the most common example of a social engineering threat?
Viruses
Pharming
Man-in-the-Middle Attacks
Phishing
30
Which of the following are good practice for setting a password in a password policy? Choose two options.
A variety of upper-case & lower case letters, numbers and characters
It should be written down near your computer in case you ever forget it.
It should be something easy to remember, like a word or some personal info
It should be at least 8 characters in length.
31
What is the disadvantage to implementing security features into your interface design?
It has to be regularly maintained and updated.
It can increase the need for stringent security measures.
It can be resource intensive and slow your computer.
It may worsen ease-of-use & accessibility.
32
Below are terms relating to encryption. Match SSL with its definition.
A unique string that is used to ensure the encryption output is unique.
An encryption technology commonly used on websites.
The process performed to encrypt the plain-text data.
The plain-text data after it has been encrypted.
33
What do we mean by “social engineering”?
Manipulating individuals into handing over private information.
Inserting yourself into the middle of a communication between two parties.
Misdirecting users to a fraudulent/fake website without users knowledge.
Gaining access to a system without the permission of the owner.
34
What type of threat can obscuring data entry protect us from?
Spyware
Shoulder Surfing
Phishing
Trojans
35
What kind of threats can disaster recovery policies help to protect us from being impacted by?
Hardware failure
Malware
All of the above.
Natural disasters
36
Which of the following are benefits of setting the correct level of access required for each user? Choose two options.
Prevents attackers from accessing any files on the system.
Reduces the impact of a cybersecurity incident.
Reduces the likelihood of human error damaging data.
Simple and easy to set up for system administrators.
37
Users should only be given the level of access they required in order to complete their job. What do we know this as?
Principle of Least Privilege
Principle of Least Need
Principle of Least Purpose
Principle of Least Rights
38
Which two of the following are common rules that you must follow to ensure a password is secure? Choose two options.
Must be a maximum of 8 characters in length.
Must contain uppercase & lowercase letters, numbers & symbols.
Must not be reused on multiple different systems.
Must contain dictionary words or names.
39
Which of the following are examples of deliberate internal threats? Choose two options.
Use of portable storage devices
Stealing or leaking of information
Visiting untrustworthy websites
Users overriding security controls
40
Why might someone intentionally steal or leak information? Choose two options.
Whistleblowing over illegal practices.
Being disgruntled due to being made redundant.
By mistake due to a phishing attack.
Due to visiting an untrustworthy website.
41
In an acceptable software policy, who is usually responsible for installing software?
IT Support Staff
Admin Staff
Senior Management
Maintenance Staff
42
Which of the following are examples of accidental internal threats? Choose two options.
Visiting untrustworthy websites
Downloads from the internet
Shoulder surfing
Stealing or leaking of information
43
How might an employee unintentionally disclose data? Choose two options.
Whistleblowing over illegal practices.
By overriding security controls.
Due to spyware being installed on their system.
Being tricked by a phishing email.
44
What are the disadvantages of anti-virus software?Choose two options.
It can only detect viruses, not other types of malware like trojans.
Running a scan can cause your computer to run slowly.
It must be regularly maintained and updated.
It is extremely expensive and difficult to install.
45
What is the difference between a white hat hacker and a black hat hacker?
A white hat hacker only reads or copies data when they gain access to it
A white hat hacker is hired by businesses to hack their own system to test
A black hat hacker is hired by to hack their own system to test security.
A black hat hacker only reads or copies data when they gain access to it
