CSOC Cybersecurity Fundamentals

Question 1

What is the CIA triad in cybersecurity and what do the three components represent?

Accepted Answer

Confidentiality, Integrity, and Availability — the three core properties that security controls aim to protect

Answer

The CIA triad is the foundational model for information security. Confidentiality ensures data is accessible only to authorised parties; Integrity ensures data is accurate and unaltered; Availability ensures systems and data are accessible when needed.

Question 2

What is the difference between a vulnerability and an exploit in cybersecurity?

Accepted Answer

A vulnerability is a weakness in a system; an exploit is the code or technique used to take advantage of that vulnerability

Answer

A vulnerability is a weakness or flaw in a system, software, or process. An exploit is the specific code, technique, or method that an attacker uses to take advantage of that vulnerability to compromise a system.

Question 3

What is a 'zero-day vulnerability'?

Accepted Answer

A vulnerability that is unknown to the software vendor and for which no patch is yet available

Answer

A zero-day vulnerability is one that is unknown to the software developer or vendor, meaning there is no available patch or fix. Attackers who discover or purchase zero-days can exploit them before any defence is possible.

Question 4

What is the purpose of network segmentation in cybersecurity?

Accepted Answer

To divide a network into isolated segments so that a breach in one segment does not automatically compromise the entire network

Answer

Network segmentation limits lateral movement by attackers within a compromised network. By isolating segments, a breach in one area is contained, preventing attackers from easily accessing all systems and data.

Question 5

What is a 'man-in-the-middle' (MITM) attack?

Accepted Answer

An attack where the attacker secretly intercepts and potentially alters communications between two parties who believe they are communicating directly

Answer

In a MITM attack, the attacker inserts themselves between two communicating parties, intercepting and potentially altering the data without the knowledge of either party. This can be used to steal credentials, session tokens, or sensitive data.

CSOC Practice Test

CSOC Practice Test

CSOC Cybersecurity Fundamentals