stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cybersecurity Measures and Threats 2 Flashcards | StudBud
Explore
/
Cybersecurity Measures and Threats 2
Cybersecurity Measures and Threats 2
23 terms
·
StudBud Administration
·
46 plays
Test your knowledge on cybersecurity measures, threats, and compliance regulations
Flashcards
23 cards
F
Practice quiz
P
Host live
L
Questions
23
Answers
1
True or false: Supply chain threats only target hardware.
True
False
2
True or false: GDPR only protects financial transactions.
True
False
3
Why are IoCs critical in threat detection?
Ensure data encryption
Prevent all future attacks
Eliminate need for firewalls
Provide evidence of breaches
4
Which is NOT an external threat?
Hackers
State-sponsored attackers
Disgruntled employees
Organized crime groups
5
What is the role of an internal threat model?
Monitor anti-virus effectiveness
Identify external attacks
Determine natural disaster risks
Assess insider vulnerabilities
6
True or false: A watering hole attack involves phishing emails.
True
False
7
What is the significance of a watering hole attack?
Direct network penetration
Exfiltrating data
Delivery of malware
Compromising visited websites
8
What is the primary focus of HIPAA compliance?
Protection of PII
Regulation of environmental standards
Financial transaction security
Security of health data
9
True or false: HIPAA focuses on environmental standards.
True
False
10
Which compliance focuses on health information security?
GDPR
FISMA
HIPAA
PCI DSS
11
What type of threat is a state-level threat?
DDoS on small business
Government-funded attack
Ransomware on financial institution
Disgruntled employee attack
12
What is a potential outcome of failing GDPR compliance?
Financial penalty
Warning letter
Reduction in bandwidth
Exemption from compliance
13
True or false: Compliance increases profitability.
False
True
14
What best describes an Advanced Persistent Threat (APT)?
Automated attack tool
Short-term attack
Low-skilled attack
Highly skilled attack
15
True or false: IoCs prevent all future attacks.
True
False
16
What defines the purpose of PCI DSS?
Maintain secure environment
Secure electronic communication
Regulate government data usage
Protect healthcare data
17
What is a primary characteristic of a supply chain threat?
Affects physical security
Targets end-users
Only hardware components
Compromise of software vendor
18
How can organizations mitigate supply chain risks?
Access for all employees
Avoid third-party software
Regular vulnerability assessments
Use outdated software
19
How does GDPR impact organizations?
Encrypt all communications
Only healthcare data
Protect personal data
Focus on financial transactions
20
Which type of IoC are unusual traffic patterns?
User Account IoC
System IoC
Endpoint IoC
Network IoC
21
What is a zero-day vulnerability?
Known but low risk
Only affects outdated software
Unknown to vendor
Patched but not distributed
22
What should organizations do against APTs?
Disconnect from internet
Rely only on firewalls
Ignore minor anomalies
Continuously monitor traffic
23
What is a common characteristic of a supply chain threat?
Focuses on physical security
Targets final users
Compromises third-party software
Detected immediately after deployment