Let’s make a thread
Comment “I need an accountability partner” in cybersecurity.
Let’s connect and help one other grow in this cyber space.
Something a little more push is what we need.
Dear Cyberians,
I will be sharing an amazing news with you all very soon.
This is an opportunity for people to certify on a topic in cybersecurity for FREE‼️.
Anticipate 🥳
The process of encoding data to protect it from unauthorized access is known as ____.
A. Encryption
B. Firewall
C. Intrusion Detection
D. Multi-factor Authentication
Which of the following is an example of a security control that provides confidentiality?
A) Firewall
B) Intrusion Detection System (IDS)
C) Data backup
D) Encryption
Which of the following is defined as a network segmentation technology that allows devices on a network to be logically grouped, even if they are in different locations?
A. Firewall
B. VLAN
C. Switch
D. Router
If you’re transitioning into cybersecurity,
Preparing for a foundational exams or
Applying for entry-level roles,
Do check this out.
Part 5 has just been uploaded.
Don’t forget to like, subscribe and share.
In the CIA triad, which of the following best describes the principle of integrity?
A)Data isn’t modified without authorization
B)Data is available when needed
C)Data is confidential and only accessed by authorized users
D)Data is protected from unauthorized disclosure
A company wants to protect sensitive data on their laptops from being accessed if the devices are lost or stolen.
Which would be the BEST solution?
A) Data loss prevention (DLP) software
B) Full-disk encryption
C) Two-factor authentication
D) Biometric authentication
What is an effective way of hardening a system?
A. Introduce and IDS
B. Patch the system
C. Create and DMZ for web applications
D. Scan for vulnerabilities
In incident terminology, the meaning of zero day is?
A. Days to solve a previously unknown system vulnerability.
B. A previously unknown system vulnerability.
C. Days without a security incident
D. Days with a cybersecurity incident.
Which of the following is an internet scam done by cyber-criminals where the user is convinced digitally to provide confidential information?
A. MiTM attack
B. Phishing attack
C. Website attack
D. DoS attack
Which type of security testing involves simulating an attack on a system to discover vulnerabilities?
A. Penetration testing
B. Vulnerability scanning
C. Security audits
D. Code reviews
What is the PRIMARY purpose of a security information and event management (SIEM) system?
A. To provide real-time analysis of security alerts
B. To manage security policies across an organization
C. To detect and prevent network intrusions
D. To store and archive log files
The authenticity and security of data travelling over a network are ensured by?
A. Firewall
B. Antivirus
C. Pentesting Tools
D. Network-security protocols
A security analyst suspects a system has been compromised by malware.
Which of the following should be done FIRST to preserve evidence?
A) Disconnect the system from the network
B) Reboot the system
C) Perform a full system scan
D) Create a disk image of the system
Which security principle states that a user should only have the necessary permission to execute a task?
A. Privileged account
B. Separation of duties
C. Least Privilege
D. Defense in depth
An organization has discovered unauthorized access to their internal network.
Which of the following steps should be taken FIRST in the incident response process?
A) Containment
B) Identification
C) Eradication
D) Recovery
Company is implementing a new security policy that requires employees to use a unique ID and a strong password to access the corporate network.
Which of the following security principles does this policy address?
A. Confidentiality
B. Integrity
C. Availability
D. Account
An organization is implementing an application that processes credit card data.
Which of the following compliance standards must they adhere to?
A) HIPAA
B) GDPR
C) PCI-DSS
D) SOX
Governments hired some highly skilled hackers for providing cyber security for the country or state. These types of hackers are termed as _______
A. State sponsored hackers
B. Yellow hackers
C. Special hackers
D. Government Hackers
3 things I’d do if I were to start cybersecurity all over again.
📌Make relevant connections
First engaging with people that inspire you in cybersecurity.
Engaging with others on this platform makes you visible to their network as well.
Let’s make a thread
Comment “I need an accountability partner” in cybersecurity.
Let’s connect and help one other grow in this cyber space.
Something a little more push is what we need.
A company is deploying a new application that requires secure communication between clients and the server.
Which of the following protocols would BEST meet this requirement?
A. FTP
B. HTTP
C. HTTPS
D. SMTP
In contrast, which of these refers to the permission granted to users, processes or devices, to access specific assets?
A. Identity
B. Integrity
C. Authorization
D. Authentication
Which of the following is an example of security control that provides redundancy?
A. Firewall
B. Intrusion Detection System (IDS)
C. Data backup
D. Encryption
Which attack tries to formulate a web resource to engage its users by flooding the URL of the victim with unlimited requests than the server can handle.?
A. Phishing attack
B. DoS attack
C. Website attack
D. MiTM attack
An organization wants to improve the security of their web application by encrypting sensitive data and ensuring the confidentiality of user sessions.
Which of the following technologies should be implemented?
A) SSL/TLS
B) S/MIME
C) IPSec
D) SSH
When a company hires an issuance company to mitigate risk, which risk management technique is being applied?
A. Risk tolerance
B. Risk mitigation
C. Rust transfer
D. Risk avoidance
A biometric reader that grants access to a computer system in a data center is a :
A. Physical control
B. Administrative control
C. Detective control
D. Technical control
Which of the following types of cryptography relies on a single shared key for both encryption and decryption?
A) Symmetric cryptography
B) Asymmetric cryptography
C) Hash functions
D) Digital signatures
An organization is implementing a security policy requiring employees to change their passwords every 60 days.
Which security principle does this policy address?
A) Least privilege
B) Separation of duties
C) Defense in depth
D) Password aging
An organization wants to ensure the confidentiality of data stored on their servers.
Which of the following encryption methods should be used?
A. Symmetric encryption
B. Asymmetric encryption
C. Hashing
D. Digital Signatures.
A company wants to secure their email communications by ensuring the authenticity of the sender and the integrity of the email content.
Which of the following should be implemented?
A) S/MIME
B) SSH
C) SSL/TLS
D) IPSec
Which concept describes an information security strategy that integrates people, technology and operations in order to establish security control across multiple layers of the organization?
A. Least Privilege
B. Defense in depth
C. DAC
D. Privileged accounts
Which of these is an attack where an attacker controls multiple devices purposely to overwhelm a system?
A. Botnet attack
B. Spamming attack
C. Malware attack
D. MiTM attack
A company is evaluating cloud storage providers for their sensitive data.
Which of the following should be the PRIMARY consideration when selecting a provider?
A) Cost
B) Data center location
C) Availability
D) Encryption at rest
Wireshark is a complete network protocol analyzer.
Burpe is for vulnerability scanning
John the Ripper is an open source password recovery tool and security auditing
Nslookup is a command-line for querying domain name system.
C. Wireshark ✅
What is the software which infiltrates user’s system, spy on user’s activities, stealing internet usage data & sensitive information of that user.
a) Trojan
b) Spyware
c) Ransomware
d) Rootkit
If you were just woken from sleep to describe one term in cybersecurity, what would it be?
I’ll go first:
CIA triad which means confidentiality, integrity and availability.
Full meaning of TCP/IP?
A. Transmission Control Protocol/ internet protocol
B. Transmission Control Protocol/ internet protocol
C. Transaction Control protocol/ internet protocol
D. Transmission Contribution protocol/ internet protocol
Which encryption type uses one key to encrypt and the same key to decrypt data. Usually used with large data sets.
A. Asymmetric encryption
B. Symmetric encryption
C. Hashing
D. Salting
They are neither good nor bad hackers. They penetrate a system without unauthorized but do not necessarily have bad intentions.
Who are they?
A. Blue hat hackers
B. Grey hat hacker
C. Black hat hackers
D. White hat hackers
Which of the following is an example of a security control that provides non-repudiation?
A. Encryption
B. Digital signatures
C. Data backup
D. Firewall
An organization has decided to use a hybrid cloud deployment model for their new application.
What is the PRIMARY reason for this decision?
A) To reduce costs
B) To improve performance
C) To provide flexibility
D) To increase security
What does EDR stands for ?
A. Endless disaster recovery
B. Endpoint detection and response
C. Endpoint disaster recovery
D. Endless detection and response
Which of the following are the types of scanning?
A. Port, network, and services
B. Client, Server, and network
C. Network, vulnerability, port
D. None of the above
You 🫵🏼. As you bookmark every cybersecurity resources you see, I hope you actually go through them after. 🌚
You don’t necessarily need too many resources of the same thing, remember this!
Potentially Unwanted Application (PUAs) which are also referred to as “Graywares” can pose severe risk to security.
Which of the following is NOT a type of PUA?
A. Adware
B. Torrent
C. PII
D. Crypto mining
Which type of access control model is based on the classification of information and user clearances?
A) Discretionary Access Control (DAC)
B) Mandatory Access Control (MAC)
C) Role-Based Access Control (RBAC)
D) Attribute-Based Access Control (ABAC)
The main purpose of incident management is to …..
A. Keep business running
B. Acquire more customers
C. Increase lifespan
D. Ensure Safety of humans and stakeholders.
Which of the following is not a step followed by cyber-criminals in data breaching?
A. Exfiltration
B. Research and info-gathering
C. Attack the system
D. Fixing the bugs
Dear Cyberians,
The course is in 🎉🔥. And it is FREE for now.
Take advantage of it and get certified on Cyber Kill Chain.
Click on the link to access the course.
Check this out on LinkedIn Learning:
@ireteeh
@sisinerdtweets
Dear Cyberians,
I will be sharing an amazing news with you all very soon.
This is an opportunity for people to certify on a topic in cybersecurity for FREE‼️.
Anticipate 🥳
Which of the following is an example of an administrative security control?
A. Access Control List
B. Acceptable use policy
C. Badge Readers
D. No entry signs
Which of the following is the most efficient and effective ways to test a business continuity plan?
A. Simulations
B. Walkthroughs
C. Reviews
D. Discussions
Username and passwords, firewalls and other security features that control access to computer networks are example of ….?
A. Administrative Control
B. Logical Control
C. Physical Control
D. DAC
In the event of disaster, which of these should be the primary objective?
A. Protection of production database
B. Guarantee the continuity of critical systems
C. Application of disaster communication
D. Guarantee the safety of people.
Which one of these tools is MOST likely to detect an XSS vulnerability?
A. Network vulnerability scanner
B. Static application test
C. Intrusion detection system
D. Web application vulnerability scanner.