CCP Cybersecurity Fundamentals & Concepts 5

Question 1

What is 'social engineering' in the context of cybersecurity?

Accepted Answer

Manipulating people into divulging confidential information or performing actions

Answer

Social engineering exploits human psychology rather than technical vulnerabilities to gain unauthorized access or information.

Question 2

Which control type is a security awareness training program?

Accepted Answer

Administrative control

Answer

Administrative controls are policies, procedures, and training programs that govern how people behave and manage security.

Question 3

What does the term 'attack surface' refer to?

Accepted Answer

All the points where an attacker could try to enter or extract data from an environment

Answer

The attack surface encompasses all the different points of entry an attacker could exploit to compromise a system or network.

Question 4

A user receives an email appearing to be from their bank asking them to click a link and enter credentials. This is an example of:

Accepted Answer

Phishing

Answer

Phishing is a broad social engineering attack using fraudulent emails to trick users into revealing sensitive information.

Question 5

What is the purpose of network segmentation in cybersecurity?

Accepted Answer

To divide a network into zones to contain breaches and limit lateral movement

Answer

Network segmentation creates isolated zones so that if one segment is compromised, an attacker cannot freely move to other parts of the network.

(CCP) Certified Cybersecurity Professional Practice Test