Which type of cyber attack involves sending fraudulent emails resembling those from reputable sources?
- Cross-Site Scripting (XSS)
- Injection attacks
- Phishing
- Spoofing
Phishing is a cyber attack that involves sending fraudulent emails, often mimicking reputable sources, to trick individuals into revealing sensitive information. It is a form of social engineering aimed at exploiting human trust. Recognizing phishing techniques is essential for users to avoid falling victim to such deceptive tactics and to enhance overall cybersecurity awareness.__________________________________________________
The ____________ is a protocol often used to securely manage and monitor IoT devices remotely.
- CoAP (Constrained Application Protocol)
- HTTP (Hypertext Transfer Protocol)
- MQTT (Message Queuing Telemetry Transport)
- SNMP (Simple Network Management Protocol)
SNMP (Simple Network Management Protocol) is commonly used to securely manage and monitor IoT devices remotely. It provides a standardized framework for communication and management tasks, allowing administrators to monitor device performance and configure settings. Familiarity with SNMP is essential for effective IoT device management and ensuring the security of remote monitoring processes.__________________________________________________
What is a common vulnerability associated with older Bluetooth connections?
- Blueborne Vulnerability
- Bluebugging
- Bluejacking
- Bluesnarfing
Bluesnarfing is a common vulnerability associated with older Bluetooth connections. It allows unauthorized access to a device's data, such as contacts and messages. Recognizing this vulnerability is crucial for securing Bluetooth-enabled devices and implementing measures to prevent unauthorized data access through Bluetooth attacks.__________________________________________________
____________ are detailed instructions or guidelines that support the security policy by outlining how to implement policies.
- Administrative Directives
- Operational Protocols
- Procedural Guidelines
- Security Procedures
Security Procedures are detailed instructions or guidelines that support the security policy by outlining how to implement policies. They provide step-by-step instructions for various security-related processes and actions, ensuring consistent and effective policy enforcement. Familiarity with security procedures is essential for implementing and maintaining a robust security infrastructure within an organization.__________________________________________________
How does a 'Hot Site' differ from a 'Cold Site' in disaster recovery terms?
- Cold Site has no computer systems or infrastructure
- Cold Site is a data center with active servers
- Hot Site is a secure offsite location for document storage
- Hot Site is fully equipped and operational
In disaster recovery terms, a Hot Site is fully equipped and operational, ready to take over functions in case of a disaster. On the other hand, a Cold Site lacks computer systems and infrastructure. It serves as a space to restore operations, requiring time to set up. Understanding the distinction between Hot and Cold Sites is crucial for designing an effective disaster recovery strategy based on the specific needs of the organization.__________________________________________________
Which aspect is most crucial when evaluating a vendor's security posture?
- Access Controls
- Incident Response Capability
- Marketing Strategies
- User Interface Design
When evaluating a vendor's security posture, incident response capability is the most crucial aspect. The ability to effectively respond to security incidents is vital for minimizing potential damage and ensuring a swift recovery. While access controls are essential for prevention, incident response capability focuses on handling security events, making it a key factor in determining the overall security readiness of a vendor.__________________________________________________
How does a '51% attack' affect a blockchain network?
- Enables control over the majority of the network
- Enhances data privacy
- Improves transaction speed and throughput
- Prevents unauthorized access to the blockchain data
A '51% attack' occurs when an entity gains control of more than 50% of a blockchain network's computing power. This enables the attacker to manipulate transactions, double-spend coins, and potentially disrupt the normal functioning of the network. Recognizing the impact of a '51% attack' is essential for assessing the security vulnerabilities and potential risks associated with blockchain networks.__________________________________________________
A company is found to be non-compliant with GDPR due to inadequate data protection measures. This situation emphasizes the need for ____________.
- Data Minimization
- Regular Security Audits
- Strong Data Encryption
- User Consent and Transparency
Non-compliance with GDPR often results from inadequate data protection measures. Regular security audits play a crucial role in ensuring compliance by identifying and rectifying vulnerabilities. It is essential for organizations to regularly assess and improve their data protection practices to meet GDPR standards and avoid legal consequences.__________________________________________________
What is the primary focus of 'enterprise risk management' (ERM) in cybersecurity?
- Focusing on individual departments' risk assessments
- Holistic approach to managing risks across an organization
- Identifying and addressing specific cyber threats
- Implementing technical controls to mitigate cyber risks
Enterprise Risk Management (ERM) in cybersecurity takes a holistic approach, addressing risks across the entire organization. It involves identifying, assessing, and managing risks in a coordinated manner. Understanding ERM is essential for organizations to establish comprehensive risk management frameworks that consider the interconnected nature of risks and implement strategies to safeguard the entire enterprise from potential threats.__________________________________________________
In BCM, the ____________ is a comprehensive document that provides a roadmap for how to continue operations under adverse conditions.
- Business Continuity Plan (BCP)
- Crisis Communication Plan
- Emergency Response Plan
- Incident Recovery Plan
The Business Continuity Plan (BCP) in BCM is a comprehensive document outlining strategies and procedures for continuing operations during adverse conditions. It serves as a roadmap, detailing roles, responsibilities, and steps to be taken to minimize disruption and ensure business resilience in the face of unexpected events. Understanding BCP is crucial for effective BCM.__________________________________________________