ICT Cybersecurity Threats and Mitigation 2

Question 1

Which type of malware encrypts a victim's files and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Ransomware encrypts the victim's data and extorts payment, typically in cryptocurrency, in exchange for the decryption key.

Question 2

What is a zero-day vulnerability?

Accepted Answer

A vulnerability unknown to the software vendor with no patch available

Answer

A zero-day vulnerability is a security flaw that is unknown to the vendor, meaning there are zero days of protection since no patch exists yet.

Question 3

A company receives an email appearing to be from their CEO requesting an urgent wire transfer. This is an example of what attack?

Accepted Answer

Business Email Compromise (BEC)

Answer

Business Email Compromise (BEC) involves impersonating executives or trusted parties via email to trick employees into transferring funds or sensitive data.

Question 4

Which network security tool monitors traffic and generates alerts when suspicious activity is detected but does NOT block it?

Accepted Answer

Intrusion Detection System (IDS)

Answer

An IDS passively monitors network traffic and alerts administrators to suspicious activity, while an IPS actively blocks detected threats.

Question 5

What is the primary purpose of network segmentation as a security control?

Accepted Answer

To limit lateral movement of attackers within a network

Answer

Network segmentation divides a network into zones so that if an attacker breaches one segment, they cannot freely move to other sensitive areas.

ICT - Information Communication Technology Practice Test

ICT - Information Communication Technology Practice Test

ICT Cybersecurity Threats and Mitigation 2