Module 2: Securing Networks

Question 1

Maintains the interactive Cyberthreat Real-Time Map display of current network attacks.

Answer 1

Kapersky

Question 2

It relates directly to the business continuity of an organization. Breaches can disrupt e-commerce, cause the loss of business data, threaten people’s privacy, and compromise the integrity of information.

Answer 2

Network security

Question 3

Many tools help network administrators adapt, develop, and implement threat mitigation techniques.
Two examples are:

Answer 3

Cisco Talos Intelligence Group website
Cisco Product Security Incident Response Team (PSIRT)

Question 4

A path by which a threat actor can access a server, host, or network.

Answer 4

Attack vector

Question 5

Originate from inside or outside the corporate network.

Answer 5

Attack Vectors

Question 6

An internal user, such as an employee, can accidentally or intentionally:

Answer 6

*Steal and copy confidential data to removable media, email, messaging software, and other media.
* Compromise internal servers or network infrastructure devices.
* Disconnect a critical network connection and cause a network outage.
* Connect an infected USB drive to a corporate computer system.

Question 7

The most common vector for data loss includes instant messaging software and social media sites. For instance, intercepted email or IM messages could be captured and reveal confidential information.

Answer 7

Email/Social Networking

Question 8

A stolen corporate laptop typically contains confidential organizational data. The thief can retrieve valuable personal data if the data is not stored using an encryption algorithm.

Answer 8

Unencrypted Devices

Question 9

Saving data to the cloud has many potential benefits. However, sensitive data can be lost if access to the cloud is compromised due to weak security settings

Answer 9

Cloud Storage Devices

Question 10

One risk is that an employee could perform an unauthorized transfer of data to a USB drive. Another chance is that a USB drive containing valuable corporate data could be lost.

Answer 10

Removable Media

Question 11

Corporate data should be disposed of thoroughly. For example, confidential data should be shredded when no longer required. Otherwise, a thief could retrieve discarded reports and gain valuable information.

Answer 11

Hard Copy

Question 12

Passwords are the first line of defense. Stolen passwords or weak passwords which have been compromised can provide an attacker easy access to corporate data.

Answer 12

Improper Access Control