Cyber Security Practice Test

Question 1

What is the difference between "http://" (without the "s") and "http://" (with the "s") at the beginning of a URL?

Accepted Answer

That information entered into the site is encrypted

Answer

The 's' in 'https://' stands for 'secure.' It indicates that the website uses an SSL/TLS certificate to encrypt all communication between your browser and the web server. This encryption protects sensitive data, such as login credentials or credit card numbers, from being intercepted by malicious actors during transmission. HTTP (without the 's') transmits data in plain text, making it vulnerable to eavesdropping.

Question 2

Which of the following is a "phishing" attack example?

Accepted Answer

All of the above

Answer

Phishing is a type of social engineering attack where attackers attempt to trick individuals into revealing sensitive information or performing actions by impersonating a trustworthy entity. This can occur through various channels, including malicious links in text messages (smishing), harmful links in emails disguised as known contacts, or fake websites designed to mimic legitimate ones. All the listed options are common tactics used in phishing attacks.

Question 3

Which of the following options is the best for securing your router?

Accepted Answer

Change the router's default name and password.

Answer

Changing the router's default name (SSID) and, more importantly, its default administrator password is a crucial first step in securing your network. Default credentials are often publicly known or easily guessable, making routers vulnerable to unauthorized access. While disabling remote management and logging out as administrator are also good practices, changing the default password directly prevents unauthorized access to the router's settings.

Question 4

Large corporations are the only ones targeted by cybercriminals. Is this statement true or false?

Accepted Answer

A) False

Answer

Cybercriminals target organizations of all sizes, including small and medium-sized businesses (SMBs), as well as individuals. SMBs are often seen as easier targets due to potentially weaker security measures and fewer resources dedicated to cybersecurity. Individuals are also frequently targeted through phishing, malware, and identity theft schemes, making the statement false.

Question 5

Which option is the best for determining who in a company should be in charge of cybersecurity?

Accepted Answer

To lessen the danger of cyber assaults, all employees should have a basic understanding of cybersecurity.

Answer

While IT specialists and company owners play critical roles in establishing and maintaining cybersecurity infrastructure and policies, effective cybersecurity is a shared responsibility. Every employee, regardless of their role, interacts with company systems and data, making them a potential entry point for cyber threats. Therefore, a basic understanding of cybersecurity best practices across all employees is essential to create a strong human firewall and significantly reduce the risk of successful attacks.