CYBERSECURITY FINAL EXAM Questions with Correct Solutions
Question:
1. Cybersecurity
Answer:
The art of protecting networks, devices, and data from unauthorized access or criminal use
and the practice of ensuring confidentiality, integrity, and availability of information.
Question:
2. Business Continuity Planning (BCP)
Answer:
How a business will continue operating during an unplanned disruption in service. It may
provide detailed strategies on how business operations can be maintained for both short-term
and long-term outages.
Question:
3. Data Breach
Answer:
The unlawful and unauthorized acquisition of personal information that compromises the
security, confidentiality, or integrity of personal information.
Question:
4. Computer Fraud and Abuse Act (CFAA)
Answer:
The act that prohibits intentionally accessing a computer without authorization, and was
drafted to combat various forms of "computer crime." At that time, this was largely
understood to cover "hacking or trespassing into computer systems or data." It came about
after President Regan had watched "War Games and had asked if someone could break into
their most sensitive computers.
Question:
5. GLBA - Gramm-Leach-Bliley Act
Answer:
Directed toward financial institutions, where organizations are fined up to $100,000 for each
violation of this law, and the officers and directors of the organization may be fined up to
$10,000 personally. Individual may also face up to 5 years in prison.
,Question:
6. HIPAA - Health Insurance Portability and Accountability Act (HIPAA)
Answer:
Directed toward healthcare providers, health insurers, doctors' offices and any entity that
handles patient information. The fine for breaking this act is calculated based on the number
of medical records exposed, with fines ranging from $50-$50,000 per record. Fines are
capped at $1.5 million per year, but organizations may receive the maximum fine for multiple
years. Violators may even face prison time ranging from 1-10 years.
Question:
7. Patriot Act
Answer:
This act grants law enforcement new powers to detect and prevent terrorism. Compliance
with the Act is now an essential aspect of doing business. All businesses should have
mechanisms in place to identify and properly report" suspicious transactions," currency
transactions in excess of $10,000, and people or entities listed on any of the "watch lists."
Question:
8. Federal Information Security Management Act (FISMA) (2002)
Answer:
An act that requires each federal agency to develop, document, and implement an
agency-wide program to provide information security for the information and systems that
support the operations and assets of the agency, including those provided or managed by
another agency, contractor, or other sources.
Question:
9. Federal Information Security Management Act (FISMA) (2014)
Answer:
This act modernizes federal security practices to address evolving security concerns:
strengthening the use of continuous monitoring in systems, increasing focus on issues caused
by security incidents. It also required the Office of Management and Budget (OMB) to
eliminate inefficient and wasteful reporting and reflect changes in law and advances in
technology. Penalties: Organizations may be stripped of federal funding, be barred from
receiving future federal contracts, and may be called to Washington D.C. for a government
hearing to testify on what went wrong
Question:
10. General Data Protection Regulation (GDPR)
, Answer:
Set of regulations is designed to protect the personal information of all citizens in the
European Union. International businesses that work with the European Union must comply
with GDPR. Unlike most other cybersecurity laws, this one mandates the use of encryption.
Under this act, the EU's data protection authorities can impose fines of up to up to €20
million (roughly $20,372,000), or 4 percent of worldwide turnover for the preceding financial
year—whichever is higher.
Question:
11. Authentication
Answer:
Validating the identity of authorized users. Prove to a digitized system: "I am who I say I am;"
it acts as a precursor to Authorization
Question:
12. Authorization
Answer:
Permitting an authenticated user the proper permissions: "What am I allowed to do?"
Question:
13. Single Sign-On (SSO)
Answer:
A single set of login credentials (login ID & password)
Question:
14. Social Sign-In
Answer:
An existing social media or digital account (Facebook, Google)
Question:
15. Multi-Factor Authentication (MFA)
Answer:
In addition to a username and password, an additional piece of data is required from the user,
such as a one-time code sent to a mobile phone, or email, or a DUO System "push" or phone
call.
Question:
16. Biometric
Question:
1. Cybersecurity
Answer:
The art of protecting networks, devices, and data from unauthorized access or criminal use
and the practice of ensuring confidentiality, integrity, and availability of information.
Question:
2. Business Continuity Planning (BCP)
Answer:
How a business will continue operating during an unplanned disruption in service. It may
provide detailed strategies on how business operations can be maintained for both short-term
and long-term outages.
Question:
3. Data Breach
Answer:
The unlawful and unauthorized acquisition of personal information that compromises the
security, confidentiality, or integrity of personal information.
Question:
4. Computer Fraud and Abuse Act (CFAA)
Answer:
The act that prohibits intentionally accessing a computer without authorization, and was
drafted to combat various forms of "computer crime." At that time, this was largely
understood to cover "hacking or trespassing into computer systems or data." It came about
after President Regan had watched "War Games and had asked if someone could break into
their most sensitive computers.
Question:
5. GLBA - Gramm-Leach-Bliley Act
Answer:
Directed toward financial institutions, where organizations are fined up to $100,000 for each
violation of this law, and the officers and directors of the organization may be fined up to
$10,000 personally. Individual may also face up to 5 years in prison.
,Question:
6. HIPAA - Health Insurance Portability and Accountability Act (HIPAA)
Answer:
Directed toward healthcare providers, health insurers, doctors' offices and any entity that
handles patient information. The fine for breaking this act is calculated based on the number
of medical records exposed, with fines ranging from $50-$50,000 per record. Fines are
capped at $1.5 million per year, but organizations may receive the maximum fine for multiple
years. Violators may even face prison time ranging from 1-10 years.
Question:
7. Patriot Act
Answer:
This act grants law enforcement new powers to detect and prevent terrorism. Compliance
with the Act is now an essential aspect of doing business. All businesses should have
mechanisms in place to identify and properly report" suspicious transactions," currency
transactions in excess of $10,000, and people or entities listed on any of the "watch lists."
Question:
8. Federal Information Security Management Act (FISMA) (2002)
Answer:
An act that requires each federal agency to develop, document, and implement an
agency-wide program to provide information security for the information and systems that
support the operations and assets of the agency, including those provided or managed by
another agency, contractor, or other sources.
Question:
9. Federal Information Security Management Act (FISMA) (2014)
Answer:
This act modernizes federal security practices to address evolving security concerns:
strengthening the use of continuous monitoring in systems, increasing focus on issues caused
by security incidents. It also required the Office of Management and Budget (OMB) to
eliminate inefficient and wasteful reporting and reflect changes in law and advances in
technology. Penalties: Organizations may be stripped of federal funding, be barred from
receiving future federal contracts, and may be called to Washington D.C. for a government
hearing to testify on what went wrong
Question:
10. General Data Protection Regulation (GDPR)
, Answer:
Set of regulations is designed to protect the personal information of all citizens in the
European Union. International businesses that work with the European Union must comply
with GDPR. Unlike most other cybersecurity laws, this one mandates the use of encryption.
Under this act, the EU's data protection authorities can impose fines of up to up to €20
million (roughly $20,372,000), or 4 percent of worldwide turnover for the preceding financial
year—whichever is higher.
Question:
11. Authentication
Answer:
Validating the identity of authorized users. Prove to a digitized system: "I am who I say I am;"
it acts as a precursor to Authorization
Question:
12. Authorization
Answer:
Permitting an authenticated user the proper permissions: "What am I allowed to do?"
Question:
13. Single Sign-On (SSO)
Answer:
A single set of login credentials (login ID & password)
Question:
14. Social Sign-In
Answer:
An existing social media or digital account (Facebook, Google)
Question:
15. Multi-Factor Authentication (MFA)
Answer:
In addition to a username and password, an additional piece of data is required from the user,
such as a one-time code sent to a mobile phone, or email, or a DUO System "push" or phone
call.
Question:
16. Biometric
