Free CyberVista Cybersecurity Fundamentals & Terminology Questions and Answers — Questions and Answers
Question 1: What is the primary goal of cybersecurity?
- To create new software.
- To protect digital assets from unauthorized access (Correct answer)
- To slow down network speeds.
- To monitor employee performance.
Correct answer: To protect digital assets from unauthorized access
The primary goal of cybersecurity is to establish robust defenses that protect digital assets, such as data, systems, and networks, from unauthorized access, use, disclosure, disruption, modification, or destruction. This involves implementing various technologies, processes, and controls to safeguard information and ensure the continuity of operations. Ultimately, it aims to maintain the confidentiality, integrity, and availability of digital resources.
Question 2: What does the CIA triad stand for in cybersecurity?
- Communication, Infrastructure, Access
- Confidentiality, Integrity, Availability (Correct answer)
- Control, Input, Audit
- Compliance, Identity, Alerting
Correct answer: Confidentiality, Integrity, Availability
The CIA triad is a foundational model in cybersecurity, representing the three core principles for securing information. Confidentiality ensures that data is accessible only to authorized individuals, preventing unauthorized disclosure. Integrity guarantees that data remains accurate and unaltered, protecting against unauthorized modification. Availability ensures that authorized users can access information and systems when needed.
Question 3: What is a firewall used for?
- To store backup data.
- To block unauthorized access to or from a private network (Correct answer)
- To update system software.
- To increase internet speed.
Correct answer: To block unauthorized access to or from a private network
A firewall acts as a security barrier, monitoring and controlling incoming and outgoing network traffic based on predefined security rules. Its primary function is to block unauthorized access attempts from external networks (like the internet) to a private internal network, and vice versa. This helps protect systems and data from malicious attacks and ensures only legitimate traffic is allowed.
Question 4: What is phishing?
- A method of data encryption.
- A fraudulent attempt to obtain sensitive information (Correct answer)
- A secure login process.
- A virus removal tool.
Correct answer: A fraudulent attempt to obtain sensitive information
Phishing is a common cyberattack where malicious actors attempt to trick individuals into revealing sensitive information, such as usernames, passwords, or credit card details. This is typically done by disguising themselves as a trustworthy entity in electronic communication, like an email or text message. The goal is to gain unauthorized access to accounts or systems by exploiting human trust.
Question 5: What is malware?
- A safe email attachment.
- Malicious software intended to harm systems (Correct answer)
- A data backup tool.
- An operating system feature.
Correct answer: Malicious software intended to harm systems
Malware, short for malicious software, is a broad term referring to any software intentionally designed to cause damage to a computer, server, client, or computer network. It encompasses various types of threats, including viruses, worms, Trojans, ransomware, and spyware. Malware aims to disrupt operations, steal data, or gain unauthorized access to systems without the user's knowledge or consent.
Question 6: What is encryption used for in cybersecurity?
- To delete old files.
- To protect data confidentiality during transmission or storage (Correct answer)
- To install software updates.
- To clean temporary files.
Correct answer: To protect data confidentiality during transmission or storage
Encryption is a fundamental cybersecurity technique used to protect data confidentiality by transforming information into a coded format, making it unreadable to unauthorized parties. This process is crucial for securing sensitive data both when it is being transmitted across networks (data in transit) and when it is stored on devices or servers (data at rest). Only individuals with the correct decryption key can access the original information.
Question 7: Which of the following is an example of two-factor authentication?
- Just a username and password.
- Password plus a one-time code sent to a phone (Correct answer)
- Email and name.
- PIN number only.
Correct answer: Password plus a one-time code sent to a phone
Two-factor authentication (2FA) significantly enhances security by requiring users to provide two different types of verification factors to gain access. A common example is combining something the user knows (like a password) with something the user has (like a one-time code sent to their phone or generated by an authenticator app). This makes it much harder for unauthorized individuals to access an account, even if they compromise one factor.
Question 8: What does VPN stand for?
- Virtual Protected Node.
- Virtual Private Network (Correct answer)
- Verified Public Network.
- Variable Packet Node.
Correct answer: Virtual Private Network
VPN stands for Virtual Private Network. This technology creates a secure, encrypted connection over a public network, like the internet. It allows users to send and receive data as if their computing devices were directly connected to a private network, enhancing privacy and security by masking IP addresses and encrypting traffic.
Question 9: What is the function of antivirus software?
- It slows down the system.
- It protects the computer by detecting and removing malware (Correct answer)
- It improves battery life.
- It updates the hardware.
Correct answer: It protects the computer by detecting and removing malware
Antivirus software is specifically designed to protect computers by identifying, preventing, and removing malicious software, commonly known as malware. It scans files and programs for known threats and suspicious behavior, safeguarding the system's integrity and data. Its core function is to combat digital infections.
What is the primary goal of cybersecurity?