ICT Cybersecurity Threats and Mitigation 5

Question 1

Which security framework published by NIST is widely used to manage and reduce cybersecurity risk in critical infrastructure?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST Cybersecurity Framework provides a policy framework of computer security guidance using five functions: Identify, Protect, Detect, Respond, and Recover.

Question 2

An attacker floods a company's web server with traffic from thousands of IPs, making it inaccessible. What category of attack is this?

Accepted Answer

Distributed Denial of Service (DDoS)

Answer

A DDoS attack overwhelms a target server with traffic from many compromised systems simultaneously, exhausting resources and denying service to legitimate users.

Question 3

What is the primary function of a public key infrastructure (PKI)?

Accepted Answer

To manage digital certificates and public/private key pairs for secure communications

Answer

PKI manages the creation, distribution, storage, and revocation of digital certificates, enabling trusted encrypted communications and identity verification.

Question 4

Which mitigation technique involves monitoring for unusual behavior patterns rather than matching known malware signatures?

Accepted Answer

Anomaly-based (behavioral) detection

Answer

Anomaly-based detection establishes a baseline of normal behavior and flags deviations, making it effective against zero-day and unknown threats that signature-based tools miss.

Question 5

What does 'data exfiltration' mean in the context of a cyberattack?

Accepted Answer

Unauthorized transfer of data from a victim's environment to attacker-controlled infrastructure

Answer

Data exfiltration is the unauthorized copying, transfer, or retrieval of data from a compromised system to a location controlled by the attacker.

ICT - Information Communication Technology Practice Test

ICT - Information Communication Technology Practice Test

ICT Cybersecurity Threats and Mitigation 5