Cybersecurity Fundamentals and Controls Practice Quiz (19 questions)

Explanation

Cybersecurity protects systems, networks, and information from unauthorized access, harm, loss, or exposure. Faster operation is a performance goal, and protecting data alone omits systems and networks.

Explanation

A security control is a measure used to protect systems, information, or users. A vulnerability is a weakness, a backup is an extra data copy, and a denial-of-service attack seeks to disrupt a service.

Explanation

Confidentiality protects information from unauthorized access. Availability concerns access when needed, integrity concerns accuracy and unchanged data, and authentication verifies identity.

Explanation

Integrity ensures that data remains accurate and unchanged. Confidentiality addresses unauthorized access, availability addresses access when needed, and authorization concerns permissions.

Explanation

Availability ensures that systems and information are accessible when needed. Confidentiality protects against unauthorized access, integrity concerns accurate and unchanged data, and authentication verifies identity.

Explanation

A threat is a potential danger that could cause harm. A vulnerability is an exploitable weakness, risk is the possibility of harm, and a data breach involves unauthorized access to or exposure of data.

Explanation

A vulnerability is a weakness in a system, software, process, or user that a threat or attacker can exploit. A threat is the potential danger, risk is the possibility of harm, and a data breach is unauthorized access to or exposure of data.

Explanation

Malware is the general term for malicious software designed to harm a computer or system. Ransomware is a specific type that locks or encrypts files and demands payment; phishing uses fraudulent communications, while spyware secretly collects information.

Explanation

Ransomware locks or encrypts files and demands payment. Spyware secretly collects information, a worm spreads automatically between computers, and phishing uses fraudulent communications to trick people.

Explanation

Phishing uses fraudulent messages, websites, or communications to trick people into revealing sensitive information or taking an unsafe action. Spyware secretly collects information, ransomware locks files for payment, and a worm spreads automatically.

Explanation

Authentication verifies a user's identity, such as when they enter a password to log in. Authorization concerns what the user may access; Role-Based Access Control assigns access by job role, and least privilege limits permissions to what the task requires.

Explanation

Authorization determines what an authenticated user is allowed to access or do. Authentication verifies identity, while Role-Based Access Control and least privilege describe ways of assigning or limiting permissions.

Explanation

Role-Based Access Control gives users access based on their job role. Attribute-Based Access Control can consider attributes such as location, while authentication verifies identity and least privilege limits access to what work requires.

Explanation

Least privilege gives a user only the permissions needed to complete their work or task, so the assistant should receive access to the project folder rather than unrelated files. Role-Based Access Control uses job roles, authentication verifies identity, and Attribute-Based Access Control may use attributes such as location.

Explanation

A backup is an extra copy of important data that can help restore information after ransomware, data loss, or system failure. A firewall helps protect a network from unauthorized traffic, while a camera monitors a physical area and an access-control policy governs permissions.

Explanation

A firewall is a technical control that can help protect a network from unauthorized traffic. A security camera is a physical control, a backup supports data recovery, and a written policy is administrative rather than physical.

Explanation

Data protection helps prevent unauthorized access, theft, loss, alteration, and exposure of personal or sensitive information. Managing information-handling practices describes data privacy, while reducing an incident’s impact describes mitigation.

Explanation

Data privacy concerns how personal information is collected, used, stored, shared, and protected. Data protection focuses on preventing unauthorized access, loss, or exposure; mitigation reduces incident risk or impact, and a breach involves unauthorized access or exposure.

Explanation

Unauthorized access to protected data qualifies as a data breach, even if records are not changed or downloaded. Authorized access is permitted, mitigation involves reducing incident risk or impact, and privacy concerns personal-information handling.