Question 1

Negative consequences of lax cybersecurity that companies tend to face include all of the following except ________.

Accepted Answer

While lax cybersecurity can lead to damaged brands and reputations, financial penalties, and customer backlash, criminal charges are not typically a consequence that companies face. Instead, individuals or groups responsible for the cybersecurity breach may face criminal charges.

Question 2

The main cause of data breaches is ________,which is so successful because of ________ when management does not do enough to defend against cyberthreats.

Accepted Answer

Hacking is a common cause of data breaches, but it is mostly successful due to negligence. Organizations often do not invest enough in cybersecurity measures or fail to implement proper security protocols, creating an opportunity for hackers to exploit vulnerabilities. Malware can also be a cause of data breaches, but again, it is often through negligence that these attacks are successful. BYOD (Bring Your Own Device) is not a direct cause of data breaches but can present a challenge for organizations in terms of managing security on personal devices used for work purposes.

Question 3

A key of finding of the 2014 Global State of Information Security Survey was ________.

Accepted Answer

The key finding of the survey was that many companies were relying on outdated cybersecurity practices, which are ineffective against current threats.

Question 4

Boeing's Black smartphone is secure because it ________.

Accepted Answer

The statement about the Boeing Black smartphone being secure due to self-destructing if tampered with suggests that it has features to protect against unauthorized access or tampering.

Question 5

___________ tactics are used by hackers and corporate spies to trick people into revealing login information or access codes.

Accepted Answer

Social engineering tactics involve manipulating and deceiving individuals to divulge sensitive information or access codes. This is a common tool used by hackers and corporate spies to gain unauthorized access to systems and data. Backdoor and password cracking refer to different methods of bypassing security measures, while BYOD refers to the practice of allowing employees to use their personal devices for work purposes.

Question 6

According to cybersecurity experts,most data breaches go unreported because corporate victims fear that disclosure would damage their stock price,or because ________.

Accepted Answer

The answer of According to cybersecurity experts,most data breaches go...

Question 7

Almost half of the 2013 breaches occurred in ________,where the largest number of records was exposed-more than 540 million data records or 66 percent.

Accepted Answer

The passage states that almost half of the 2013 breaches occurred in the United States, where the largest number of records was exposed. Therefore, the best choice is D, The United States.

Question 8

The discount retailer Target suffered a hacker attack during the fourth quarter of 2013 (4Q2013)that exposed customer account information.Which of the following was not an impact of Target's hacker attack and data breach?

Accepted Answer

Target faced 2 lawsuits-one related to privacy invasion and one for negligence is not an impact of Target's hacker attack and data breach.

Question 9

________ is also known as human hacking-tricking users into revealing their credentials and then using them to gain access to networks or accounts.

Accepted Answer

Social engineering is a form of attack where an attacker tricks or manipulates a user into revealing sensitive information, such as passwords or login credentials. This can be done through tactics such as phishing emails, phone calls, or physical impersonation. Once the attacker has gained access to the user's credentials, they can then use them to gain unauthorized access to networks or accounts.

Question 10

Experts believe the three greatest cybersecurity dangers over the next few years will involve all of the following except __________.

Accepted Answer

Persistent threats, mobile computing, and the use of social media have all been identified as major cybersecurity concerns in the near future by experts. However, POS attacks are a current and ongoing issue rather than a future prediction.

Question 11

Attacks ________ could significantly disrupt the functioning of government and business-and trigger cascading effects far beyond the targeted sector and physical location of the incident.

Accepted Answer

Attacks on critical infrastructure, such as power grids, banking networks, and transportation systems, have the potential to cause widespread disruptions that can have far-reaching consequences. This is because these systems are often interconnected, and disruptions in one area can quickly spill over into other sectors. Additionally, because critical infrastructure supports essential services that are relied upon by both businesses and individuals, an attack on these systems could have significant economic and social impacts. Attacks by hackers or hacktivists may also be disruptive, but may not necessarily have the same level of systemic risk as attacks on critical infrastructure. Similarly, attacks on industrial control systems may have limited impacts, depending on the targeted facility or industry.

Question 12

____________ is/are defined as "systems and assets,whether physical or virtual,so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security,national economic security,national public health or safety,or any combination of those matters."

Accepted Answer

This definition is commonly used to describe critical infrastructure, which includes systems and assets that are essential for the functioning of society and the economy. Examples include transportation systems, energy and water supplies, telecommunications networks, and government facilities.

Question 13

A(n)________ attack bombards a network or website with traffic to crash it and leave it vulnerable to other threats.

Accepted Answer

A distributed denial-of-service (DDoS) attack floods a network or website with traffic from multiple sources, overwhelming the system's capacity and causing it to crash. This type of attack can also leave the system vulnerable to other threats while it is down.

Question 14

Which of the following represents a cybersecurity concern about employees using their own smartphones for work purposes?

Accepted Answer

The lack of anti-malware and data encryption on personal smartphones can make them vulnerable to cyber-attacks and compromise any business data stored on the device. This is a significant cybersecurity concern for companies that allow employees to use their own smartphones for work purposes. Options A, B, and D are not directly related to cybersecurity concerns.

Question 15

Advanced persistent threat (APT)attackers want to ________.

Accepted Answer

Advanced persistent threat (APT) attackers seek to remain unnoticed so they can continue to steal data over extended periods of time. They often use sophisticated techniques to achieve their goals, such as creating backdoors that allow them to revisit systems undetected.

Question 16

One source of cybersecurity threats today are ____________who breach networks in an attempt to gain media attention or for their cause.

Accepted Answer

Hacktivists are individuals or groups of hackers who breach computer systems and networks to promote a political or social agenda, or to draw attention to a particular issue. Their goal is often to cause disruption or damage to their target, and their actions can pose a significant cybersecurity threat. Political criminals, industrial spies, and social engineers may also pose cybersecurity threats, but they are motivated by different reasons or objectives.

Question 17

A stealth network attack in which an unauthorized person gains access to a network and remains undetected for a long time is referred to as a(n)__________ attack.

Accepted Answer

An advanced persistent threat (APT) is a stealthy network attack in which an unauthorized person gains access to a network and remains undetected for a long time. APT attacks are aimed at stealing sensitive information and can be perpetrated by cybercriminals or nation-states.

Question 18

One of ________ specialties is finding websites with poor security,and then stealing and posting information from them online.

Accepted Answer

LulzSec's is known for their hacking activities where they find vulnerable websites and steal information to post online as a form of amusement.

Question 19

A(n)________ is a hacker who attempts to breach secure networks looking for trade secrets or proprietary information.

Accepted Answer

An industrial spy is a type of hacker who targets secure networks with the intent of steal trade secrets or proprietary information for the purpose of gaining a competitive advantage in business. Hacktivists typically target organizations they disagree with politically or socially, political criminals seek to disrupt or harm a government or political party, and identity thieves aim to steal personal information for financial gain.

Question 20

Cybercrime surveys have reported each of the following trends or findings except ________.

Accepted Answer

The statement "Older threats such as fraud and identity theft have decreased significantly" is not supported by cybercrime surveys. In fact, many surveys have shown that these types of threats are still prevalent and have even evolved to become more sophisticated. The other options A, B, and C are commonly reported trends and findings in cybercrime surveys.

Quiz 5: Cybersecurity and Risk Management

Negative consequences of lax cybersecurity that companies tend to face include all of the following except ________.

The main cause of data breaches is ,which is so successful because of when management does not do enough to defend against cyberthreats.