Which preventive measure could have helped mitigate the insider threat in Incident 4?

Timely revocation of access privileges

What key lessons can be learned from TechDefend’s experiences?

Keeping all software updated is essential

What was the primary vulnerability that allowed Incident 1 to succeed?

Lack of employee awareness training

What type of vulnerability did attackers exploit in Incident 3?

Unpatched software vulnerability

Which of these is an example of disinformation attackers may spread after Incident 3’s data breach?

A fake news report claiming TechDefend sold customer data for profit

Which of the following would have minimized the impact of Incident 4?

Privileged access monitoring and auditing

How could a Man-in-the-Middle (MitM) attack have occurred in the Incident 3 scenario?

Attackers intercepted client-software communication to steal sensitive data

studbud

CIS1213 26550 CLO2

10 termsStudBud Administration100 plays

Imported from external platform

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
Which preventive measure could have helped mitigate the insider threat in Incident 4?
Timely revocation of access privileges
Encrypting all stored data
Installing endpoint security software
Increasing firewall protection
2
What key lessons can be learned from TechDefend’s experiences?
Password complexity requirements should be lowered
Employees should reuse the same passwords for convenience
Security monitoring is unnecessary
Keeping all software updated is essential
3
What type of malware is designed to spread across networks without requiring user interaction?
Trojan Horse
Spyware
Worm
Ransomware
4
What was the primary vulnerability that allowed Incident 1 to succeed?
Lack of employee awareness training
Poor network segmentation
Unpatched security software
Weak password policies
5
What type of vulnerability did attackers exploit in Incident 3?
Weak authentication methods
Unpatched software vulnerability
Poor firewall configuration
Physical security lapses
6
Which of these is an example of disinformation attackers may spread after Incident 3’s data breach?
A press release from TechDefend explaining the security incident
A security advisory recommending updates from the vendor
A fake news report claiming TechDefend sold customer data for profit
A trusted cybersecurity blog on the importance of software updates.
7
Which of the following best describes the attack in Incident 1?
SQL Injection
Phishing Attack
Brute Force Attack
Malware Attack
8
Which of the following would have minimized the impact of Incident 4?
Privileged access monitoring and auditing
More frequent phishing simulations
Regular firewall updates
Increased physical security measures
9
Which type of attack was responsible for making the support portal inaccessible in Incident 2?
Denial-of-Service (DoS) Attack
Keylogger Attack
Insider Threat
Phishing Attack
10
How could a Man-in-the-Middle (MitM) attack have occurred in the Incident 3 scenario?
The attackers used a phishing email to access the system.
Attackers intercepted client-software communication to steal sensitive data
The attackers distributed ransomware via email.
The attackers launched a brute-force attack on login credentials.

CIS1213 26550 CLO2 Flashcards | StudBud