Quiz: Cybersecurity Fundamentals and Strategies — 10 domande

1. What does the cybersecurity objective 'confidentiality' mean?

A. Ensuring data is accurate and unaltered during storage and transfer

B. Reducing the potential for loss or damage when a threat exploits a vulnerability

C. Making sure information and resources are accessible to authorized users whenever needed

D. Protecting sensitive information from unauthorized access or disclosure

Answer: (D)

Spiegazione

Confidentiality in cybersecurity specifically refers to protecting sensitive information from unauthorized access or disclosure. It is one of the three core objectives of cybersecurity, along with integrity and availability, forming the CIA triad. The other options describe related but distinct concepts: integrity (accuracy and trustworthiness of data), availability (accessibility of data and resources), and risk (potential for loss or damage).

2. What are the three core objectives of cybersecurity referred to as the CIA triad?

A. Confidentiality, Privacy, Service Availability

B. Confidentiality, Integrity, Availability

C. Control, Integrity, Accessibility

D. Confidentiality, Accountability, Availability

Answer: (B)

Spiegazione

The CIA triad in cybersecurity stands for Confidentiality, Integrity, and Availability, which are the primary goals for protecting information systems. These objectives help organizations ensure data is protected properly in terms of privacy, accuracy, and accessibility.

3. Which organization is responsible for developing the cybersecurity frameworks and guidelines mentioned in the course?

A. NIST (National Institute of Standards and Technology)

B. NSA (National Security Agency)

C. ISO (International Organization for Standardization)

D. CIS (Center for Internet Security)

Answer: (A)

Spiegazione

NIST, the National Institute of Standards and Technology, is responsible for developing widely adopted cybersecurity frameworks and guidelines, such as the NIST Cybersecurity Framework. While CIS provides best practices and ISO develops international standards, NIST is the primary organization for creating comprehensive cybersecurity frameworks used in the United States and globally.

4. Which cybersecurity measure primarily helps to ensure data integrity?

A. Encryption protocols

B. Hashing and digital signatures

C. Access controls and authentication

D. Firewall configuration

Answer: (B)

Spiegazione

Hashing and digital signatures are tools that help verify that data has not been altered, thus maintaining data integrity. Encryption primarily focuses on confidentiality, while access controls and firewalls help restrict unauthorized access.

5. What is the primary role or purpose of malware in cyber threats?

A. To deceive users into revealing sensitive information

B. To disrupt network services and cause downtime

C. To damage, disrupt, or gain unauthorized access to systems

D. To maintain stealthy long-term access for espionage

Answer: (C)

Spiegazione

Malware's primary function is to damage, disrupt, or gain unauthorized access to computer systems. It includes viruses, worms, trojans, ransomware, and spyware, all designed to harm or exploit systems for malicious purposes. The other options describe specific functions of phishing, DoS attacks, and APTs, respectively, but malware's main role encompasses causing harm or unauthorized access.

6. What is a key characteristic of malware?

A. It is designed to enhance system performance.

B. It is malicious software intended to damage or disrupt systems.

C. It is a form of legitimate system software.

D. It is exclusively used for system administration.

Answer: (B)

Spiegazione

Malware refers to malicious software such as viruses, worms, and trojans, created specifically to damage, disrupt, or gain unauthorized access to computer systems.

7. Who is responsible for developing cybersecurity frameworks and guidelines in the United States?

A. NSA (National Security Agency)

B. FBI (Federal Bureau of Investigation)

C. NIST (National Institute of Standards and Technology)

D. CISA (Cybersecurity and Infrastructure Security Agency)

Answer: (C)

Spiegazione

NIST is the organization responsible for developing cybersecurity standards, frameworks, and guidelines in the U.S., helping organizations improve their cybersecurity posture.

8. Which type of cyber threat involves an attacker impersonating a trustworthy entity to deceive individuals into revealing sensitive information?

A. Malware attack

B. Phishing

C. Denial of Service attack

D. Vulnerability exploitation

Answer: (B)

Spiegazione

Phishing involves attackers impersonating trusted entities via emails or fake websites to trick victims into divulging sensitive information like passwords or credit card details.

9. Why is risk management important in cybersecurity?

A. It eliminates all vulnerabilities from a system.

B. It helps identify, assess, and mitigate potential threats and vulnerabilities.

C. It guarantees that no attacks will occur.

D. It solely focuses on technical controls without assessing threats.

Answer: (B)

Spiegazione

Risk management helps organizations identify vulnerabilities and threats, evaluate their potential impact, and implement controls to mitigate risks, which is essential for a balanced cybersecurity strategy.

10. Which emerging technology is transforming cybersecurity by enabling automated threat detection and response?

A. Blockchain technology

B. Artificial Intelligence (AI) and Machine Learning

C. Quantum computing

D. Edge computing

Answer: (B)

Spiegazione

Artificial Intelligence and Machine Learning are increasingly used in cybersecurity to analyze data patterns, detect anomalies, and automate responses to threats, improving response times and effectiveness.