Cyber Security

Question 1

What is cyber security ?

Answer 1

protecting computers , programs and data from attack or damage from unauthorised access through technologies.

Question 2

Cyber Security Threats

Answer 2

• social engineering
• malicious code
• weak and default passwords
• misconfigured access rights
• removable data
• unpatched and or outdated software

Question 3

Name two technology solutions

Answer 3

anti - virus software - needs to be kept up to date

web filter - block access to web pages with malicious code and needs to be kept updated

Question 4

Name two process solutions

Answer 4

• require user login
• minimise the access rights users have
• require regular password changes
• make sure o.s up to date
• regularly back up data to minimise that effect of an attack.

Question 5

Examples of security measures

Answer 5

• bio metrics
• e-mail confirmation ( 2FA )
• password systems
• automatic software updates
• CAPTCHA

Question 6

Name two practice solutions

Answer 6

• do not share password
• use a strong password
• do not download files without knowing they are safe
• do not click on links without knowing they are safe`

Question 7

Forms of social engineering

Answer 7

• Blaggering
• Phishing
• Pharming
• Shouldering

Question 8

What is Blagging ?

Answer 8

inventing a scenario to trick someone in to handing over personal data

Question 9

What is Phishing ?

Answer 9

inserting a malicious link in an email or text that looks like it is safe

Question 10

What is Pharming ?

Answer 10

redirecting a safe web address to a malicious one using malware

Question 11

What is Shouldering ?

Answer 11

looking over a someone’s shoulder

Question 12

What is Malware ?

Answer 12

malicious code designed to work in ways to mistreat or harm the user

Question 13

5 tips to stay safe

Answer 13

• read messages carefully before clicking
• hard passwords
• do not turn off the firewall
• be careful with public networks
• download files only from reliable websites

Question 14

Forms of malware

Answer 14

• viruses
• trojan
• spyware
• adware

Question 15

Viruses

Answer 15

self replicating software that immediately or at some point damages the device

Question 16

Trojans

Answer 16

pretend to be legitimate software in order to get installed and will do something malicious at some point

Question 17

Spyware

Answer 17

hidden software that sends sensitive data to the attacker

Question 18

Adware

Answer 18

pops up advertisements and links and slows down device

Question 19

CAPTCHA

Answer 19

the idea is to present the user with a task that only a human can read, understand, or do. CAPTCHA systems are most commonly encountered on the internet when opening an account with a service.

Question 20

Email Verification

Answer 20

An email is sent to the user’s email address and they have to click on a link in it to confirm that the email address is theirs. This links the user’s email to an account and prevents bots from opening fake or numerous accounts with false email addresses.

Question 21

Mobile Phone Verification

Answer 21

Similar to email verification but with a text

The mobile phone number entered may also be used for two-factor authorisation, whereby a user cannot access their account on a new computer by password alone, but must also enter a code sent to their phone.

Question 22

White box Test

Answer 22

White-box testing is a penetration test that uses detailed insider knowledge of the target system to improve the tests.

The aim is to simulate an attack by a malicious insider who has knowledge of the target system, and possibly basic credentials.

Question 23

Benefits of white box tests

Answer 23

Benefits:

• Deep and more detailed testing.
• Less testing time required.
• Tests things such as quality of code and application design.

Question 24

Disadvantages of white box tests

Answer 24

Disadvantages:

• This is an unrealistic attack from the perspective of an uninformed attacker from outside the organisation.

Question 25

Black Box Tests

Answer 25

In contrast to white-box tests, black-box penetration tests require no previous information and take the approach of an uninformed attacker.

The aim is to simulate an external hacking or cyber warfare attack.

Question 26

Benefits of Black Box Tests

Answer 26

Benefits:

- Simulates a realistic scenario.

Question 27

Disadvantages of black box tests

Answer 27

Disadvantages:

• Tests can take longer to perform.
• Some areas of the infrastructure and software may remain completely untested.