Google Cybersecurity Certificate

Question 1

Compliance

Answer 1

Compliance is thhe process of adhering to internal standards and external regulations enabling organizations to avoid fines, audits, and security breaches

Question 2

Security frameworks

Answer 2

Security frameworks are guidelines used for building plans to help mitigate risks and threats to data and privacy.

Question 3

Security Controls

Answer 3

Security controls are safeguards designed to reduce specific security risks. They are used with security frameworks to establish a strong security posture.

Question 4

Security posture

Answer 4

Security posture is an organization’s ability to manage its defense of critical assets and data and react to change. A strong security posture leads to lower risk for the organization.

Question 5

Thread Actor

Answer 5

A threat actor, or malicious attacker, is any person or group who presents a security risk. This risk can relate to computers, applications, networks, and data.

Question 6

Internal Threat

Answer 6

An internal threat can be a current or former employee, an external vendor, or a trusted partner who poses a security risk. At times, an internal threat is accidental. For example, an employee who accidentally clicks on a malicious email link would be considered an accidental threat. Other times, the internal actor intentionally engages in risky activities, such as unauthorized data access.

Question 7

Network security

Answer 7

Network security is the practice of keeping an organization’s network infrastructure secure from unauthorized access. This includes data, services, systems, and devices that are stored in an organization’s network.

Question 8

Cloud security

Answer 8

Cloud security is the process of ensuring that assets stored in the cloud are properly configured, or set up correctly, and access to those assets is limited to authorized users. The cloud is a network made up of a collection of servers or computers that store resources and data in remote physical locations known ad data centers that can be accessed via the Internet. Cloud security is a growing subfield of cybersecurity that specifically focuses on the protection of data, applications, and infrastructure in the cloud.

Question 9

Programming

Answer 9

Programming is the process that can be used to create a specific set of instructions for a computer to execute tasks. These tasks can include:
- Automation of repetitive tasks. (e.g. searching a list of malicious domains)
- Reviewing web traffic
- Alerting suspicious activity

Question 10

Cybersecurity

Answer 10

The practice of ensuring confidentiality, integrity, and availability of information by protecting networks, devices, people, and data from unauthorized access or criminal exploitation.

Question 11

Cloud Security

Answer 11

The process of ensuring that assets stored in the cloud are properly configured and access to those assets is limited to authorized users.

Question 12

Personally identifiable information (PII)

Answer 12

Any information used to infer an individual’s identity.

Question 13

Sensitive personally identifiable information (SPII)

Answer 13

A specific type of PIIthat falls under stricter handling guidelines.

Question 14

Technical Skills

Answer 14

Skills that require knowledge of specific tools, procedures, and policies.

Question 15

Threat

Answer 15

Any circumstance or event that can negatively impact assets.

Question 16

Transferable Skills

Answer 16

Skills from other areas that can apply to different careers.

Question 17

Malware

Answer 17

A software designed to harm devices or networks

Question 18

Virus

Answer 18

A malware program that modifies other computer programs by inserting its own code to damage and/or destroy data.

Example of Malware

Question 19

Worm

Answer 19

Malware that self-replicates, spreading across the network and infecting computers.

Example of Malware

Question 20

Ransomware

Answer 20

A malicious attack during which threat actors encrypt an organization’s data and demand payment to restore access.

Example of Malware

Question 21

Spyware

Answer 21

Malicious software installed on a user’s computer without their permission is used to spy on and steal user data.

Example of Malware

Question 22

Phishing

Answer 22

The use of digital communications to trick people into revealing sensitive data or deploying malicious software.

Question 23

Spear phishing

Answer 23

A malicious email attack targeting a specific user or group of users that appears to originate from a trusted source.

Example of Phishing

Question 24

Whaling

Answer 24

A form of spear phishing during which threat actors target executives in order to gain access to sensitive data.

Example of: Phishing