Graded Quiz: Common Security Threats And Risks » Week 1 » Introduction To Cybersecurity Essentials

Q: What does confidentiality of data refer to?

That’s right! Confidentiality of data refers to the restricting of access to only those users that need it. The principle of least privilege (PoLP) is the idea that any user, program, or process should have only the bare minimum privileges necessary to perform its function.

Q: Maria has taken her college entry exam and is waiting to get her results via email. By accident, the university sent Maria’s results to Alexander. What part of the CIA Triad has been broken?

That’s right! Confidentiality has to do with keeping data private. This often means that only authorized users and processes should be able to access or modify data.

Q: Your company’s Marketing team will be taking a group of people on a tour of your facility. The company has sent an email to all employees requiring them to clean all whiteboards and to make sure their desktops are cleared. What is the company trying to protect against?

That’s right! IP theft can result in serious economic damage, loss of competitive edge, and decreased business growth.

Q: What does the acronym PII stand for?

That’s right! Personally Identifiable Information (PII) is data that could be used to identify a specific individual. It’s considered sensitive data, and it’s the information used in identity theft. PII includes information like a person’s name, address, and social security or another government-issued ID number, and financial data. In a data breach, PII is a target for attackers due to its high value when sold on the dark web.

Q: David noticed an unattended laptop in a coffee shop and decided to steal it. Which of the following types of cybercrime did he commit?

That’s right! Hardware theft is a malicious and purposeful theft of a laptop, mobile device, or storage device – either by an employee or by a stranger.

Q: Someone was recently caught sifting through your company’s trash looking for confidential information. Which type of security threat is this?

That’s right! Dumpster diving is the process of physically searching through trash to obtain useful information about a person/business that can later be used for hacking, phishing, or social engineering. This attack mostly targets large organizations or businesses as thieves search for intellectual property, blueprints, marketing, sales or financial data, email addresses, logon credentials or trade secrets.

Q: You’ve started to notice that a co-worker sitting next to you always seems to look your way when you’re trying to enter your username and password to log onto the network. What is this co-worker doing?

That’s right! Shoulder surfing is a criminal practice where thieves steal your personal data by spying over your shoulder as you use a laptop, ATM, public kiosk or other electronic device in public to gain access to logon credentials, PINs and other information.

Q: You just installed a new search engine on your computer. Afterwards, whenever you search the Internet, several pop-up windows appear on your screen directing you to buy products. What type of malware is installed on your machine?

That’s right! Adware, or advertising supported software, is software that displays unwanted advertisements on your computer. Adware programs can display pop-up ads on your computer, can change your browser’s homepage, and can include spyware.

Q: Your supervisor is extremely busy today and asks you to log into the HR server using her logon credentials to retrieve some payroll reports. What should you do?

That’s right! Employees should never share logon credentials under any circumstances. Doing so will typically violate any company’s security policy. You should never share your personal username and password, either. If you must, immediately change it after the person you shared it with is finished using your computer.

Q: Which of the following best describes a Trojan Horse?

That’s right! A Trojan Horse is malware disguised as a legitimate software application and tries to trick you into installing it. A Trojan is designed to damage, disrupt, or perform some other harmful action on your computer, data or network.