ICT - Information Communication Technology Cybersecurity Threats and Mitigation Questions and Answers

Question 1

An employee receives an urgent email that appears to be from the company's CEO, requesting an immediate wire transfer to a new vendor. The email addresses the employee by name and references a recent project. However, the CEO's email address is slightly misspelled. This is an example of what type of attack?

Accepted Answer

Spear phishing

Answer

Spear phishing is a targeted form of phishing where attackers personalize their messages for a specific individual or organization. Unlike general phishing which uses a wide-net approach, spear phishing uses specific details (like the employee's name and a recent project) to appear more legitimate and trick the victim into performing an action, such as a wire transfer.

Question 2

Which of the following is a primary defense mechanism designed to prevent unauthorized traffic from entering or leaving a private network by filtering data packets based on a set of security rules?

Accepted Answer

Firewall

Answer

A firewall is a network security device that monitors and filters incoming and outgoing network traffic based on an organization's previously established security policies. Its fundamental purpose is to act as a barrier between a trusted internal network and untrusted external networks, such as the Internet.

Question 3

A user wants to enhance the security of their online accounts beyond just a password. Which of the following methods adds a second layer of security, typically involving a code from a mobile app, a text message, or a physical token?

Accepted Answer

Multi-Factor Authentication (MFA)

Answer

Multi-Factor Authentication (MFA) is a security system that requires more than one method of authentication from independent categories of credentials to verify a user's identity. This adds an additional layer of security, as a compromised password alone would not be enough to grant access.

Question 4

A company's e-commerce website suddenly becomes inaccessible to all customers. The IT team discovers that the web servers are being flooded with an overwhelming amount of traffic from thousands of different compromised computers around the world. What type of attack is occurring?

Accepted Answer

Distributed Denial-of-Service (DDoS)

Answer

A Distributed Denial-of-Service (DDoS) attack is characterized by an attempt to make an online service unavailable by overwhelming it with traffic from multiple sources. The use of thousands of different compromised computers (a botnet) is the key indicator of a 'distributed' attack.

Question 5

A user reports that all their important documents have been replaced with unreadable files, and a note on their desktop is demanding payment in cryptocurrency to restore them. This is a classic example of what kind of malware?

Accepted Answer

Ransomware

Answer

Ransomware is a type of malicious software that encrypts a victim's files, making them inaccessible. The attacker then demands a ransom payment, often in cryptocurrency, in exchange for the decryption key needed to restore the files.

ICT - Information Communication Technology Practice Test

ICT - Information Communication Technology Practice Test

ICT - Information Communication Technology Cybersecurity Threats and Mitigation Questions and Answers