Detecting and preventing cyber security threats Online Quiz

Security clearances are used to vet individuals to ensure they are trustworthy, reliable, and loyal, which is essential for protecting sensitive information in cyber and government roles.

Application security is a branch of cybersecurity that focuses on identifying, fixing, and preventing security vulnerabilities in software and applications.

Man in the Middle attacks intercept communications between two parties who believe they are communicating directly. ARP poisoning redirects network traffic through the attackers machine allowing them to eavesdrop modify or steal the communication.

A brute force attack is a trial-and-error method used to decode encrypted data, such as passwords, by systematically checking all possible combinations until the correct one is found.

While a simple password is a vulnerability, it is a specific security weakness rather than a 'source of information' about threats. The other options represent categories or activities that generate threat intelligence.

Hospitals store highly sensitive patient health records and financial data, which are prime targets for cybercriminals. Protecting this data is a primary responsibility of security experts in healthcare.

Cybercrime is often global, and perpetrators frequently operate from jurisdictions outside the reach of local law enforcement. This makes tracking and prosecuting them across international borders extremely difficult.

CyberPatriot is the National Youth Cyber Education Program created by the Air & Space Forces Association to inspire students toward careers in cybersecurity through competitions.

A Distributed Denial of Service (DDoS) attack involves overwhelming a target server or network with a flood of traffic, rendering it unavailable to legitimate users.

Any device connected to a network is a potential entry point for attackers. PCs, laptops, and tablets all face significant security risks if not properly protected.

A forensic computer analyst investigates digital evidence to identify how a cybercrime occurred. This is a specialized role within the cybersecurity field.

Proactive security means taking steps to prevent issues before they happen. Maintaining unique, private passwords is a fundamental practice for personal digital security.

Offensive security, or ethical hacking, involves actively testing systems to find vulnerabilities before attackers do. This improves the overall security posture of networks and systems.

A forensic computer analyst is a standard role in cybersecurity, focusing on the recovery and investigation of material found in digital devices.

As society becomes increasingly digitized, the protection of data and infrastructure is essential, making cybersecurity a critical necessity.

Escalation of privileges is a common security incident where a user gains access to resources or functions that they are not normally permitted to use.

Physical security threats include any action that compromises the physical integrity of a facility, including vandalism, terrorism, theft, and burglary.

Cyber attacks can lead to system downtime, data loss, and operational failure, all of which directly interrupt business activities.

Cyber security is defined as the practice of protecting systems, networks, and programs from digital attacks, essentially providing levels of protection for electronic data.

Cyber security involves the protection of electronic data and systems from unauthorized access or damage.

DDoS attacks, botnets, and social engineering are all well-documented methods used by attackers to compromise systems and data.

Reports from that period indicated a massive volume of cyber attacks targeting the UK, with figures often cited in the hundreds of millions.

A true positive occurs when an alert correctly identifies an actual security incident that is taking place.

Developing metrics is essential for evaluating the performance and effectiveness of an incident response team, allowing for continuous improvement.

VERIS (Vocabulary for Event Recording and Incident Sharing) is a framework designed to provide a common language and structure for sharing security incident data.

IBM Security has historically maintained a strong presence across multiple Gartner Magic Quadrants, reflecting their breadth in the security product market.

IBM Security Secret Server is a privileged account management (PAM) solution. It helps organizations manage, secure, and monitor access to privileged credentials.

The 2017 NotPetya attack, often referred to as Petya.A or NotPetya, caused massive disruption to Maersk's global operations. It was a destructive wiper malware disguised as ransomware.

The anatomy of a cyber attack typically includes reconnaissance, weaponization, delivery, exploitation, installation, and post-attack actions. Threat modeling is a proactive security design process, not a phase of an active attack.

STRIDE (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) is a widely used framework for classifying threats during the threat modeling process.

Packet trace analysis allows security professionals to inspect network traffic patterns, which is highly effective for identifying reconnaissance activities like port scanning or network mapping.

Incident Response (IR) is the organized approach to addressing and managing the aftermath of a security breach or cyber attack to limit damage and reduce recovery time.

Web security encompasses the measures and protocols used to protect websites and web applications from unauthorized access, attacks, and data breaches.

The NSA is a US intelligence agency responsible for global monitoring, collection, and processing of information and data for foreign and domestic intelligence and counterintelligence purposes, including cyber threat detection.