Foundations of Cyber Security
Questions with Accurate Answers
Access control correct answer Prevention of unauthorized use of a resource,
including authorised use in an unauthorised manner
Access control in use (4) correct answer Physical
Web
File access
File sharing
Access control principles (3) correct answer Authentication
Authorisation
Audit
Access control system (3) correct answer Policy
Model
Mechanisms
Actions on objectives correct answer Execution of the attack - the more complex
the target, the more phases of lateral movement are needed
Actions on objectives examples (2) correct answer Data exfiltration, lateral
movement within target network
Advanced (APT) correct answer Cutting edge tech, zero-day exploits
,Advanced cyber defences (6) correct answer Data protection, segregation of
duties, network fragmentation, honeypots, pentesting, standards
Anonymous correct answer Movement began as hackers on 4chan in 2003,
became hacktivists
Anonymous examples (3) correct answer 2008 Project Chanology
2010 Operation Avenge Assange
2011 Operation Tunisia
Anonymous' attacks correct answer DDoS but using individuals not botnets
Anonymous' core principles (3) correct answer Not attacking media, not attacking
critical infrastructure, working for justice
Anonymous' core values (4) correct answer Pluralistic movement, anti-
censorship, privacy, internet security
Approaches to user identification (3) correct answer Knows (e.g. password)
Has (e.g. ID card)
Is (e.g. fingerprint)
APT attack phases (4) correct answer Scan and discovery
Vulnerability exploitation
Payload injection
, Post-exploitation
APTs correct answer Advanced Persistent Threat
Baiting correct answer A real-world trojan horse, e.g. USB
Basic requirements of IT infrastructure (5) correct answer Firewalls, secure
configuration, user access control, malware protection, patch management
Benefits of honeypots (3) correct answer Attack detection, deflect attackers,
gather information on attack strategies
Bitcoin miner correct answer Device attempting to resolve the mathematical
puzzle in order to achieve bitcoin
Botnet correct answer A group of compromised computers or mobile devices
connected to a network
Brute force attack correct answer Exhaustive search of all possible combinations
Carbanak APT correct answer 2013-2015. Unusual - cybercriminals not nation
states, wasn't that technologically advanced. Loss of $1 billion
Channel consolidation correct answer Concentration of data on a few providers
(data breach)
Questions with Accurate Answers
Access control correct answer Prevention of unauthorized use of a resource,
including authorised use in an unauthorised manner
Access control in use (4) correct answer Physical
Web
File access
File sharing
Access control principles (3) correct answer Authentication
Authorisation
Audit
Access control system (3) correct answer Policy
Model
Mechanisms
Actions on objectives correct answer Execution of the attack - the more complex
the target, the more phases of lateral movement are needed
Actions on objectives examples (2) correct answer Data exfiltration, lateral
movement within target network
Advanced (APT) correct answer Cutting edge tech, zero-day exploits
,Advanced cyber defences (6) correct answer Data protection, segregation of
duties, network fragmentation, honeypots, pentesting, standards
Anonymous correct answer Movement began as hackers on 4chan in 2003,
became hacktivists
Anonymous examples (3) correct answer 2008 Project Chanology
2010 Operation Avenge Assange
2011 Operation Tunisia
Anonymous' attacks correct answer DDoS but using individuals not botnets
Anonymous' core principles (3) correct answer Not attacking media, not attacking
critical infrastructure, working for justice
Anonymous' core values (4) correct answer Pluralistic movement, anti-
censorship, privacy, internet security
Approaches to user identification (3) correct answer Knows (e.g. password)
Has (e.g. ID card)
Is (e.g. fingerprint)
APT attack phases (4) correct answer Scan and discovery
Vulnerability exploitation
Payload injection
, Post-exploitation
APTs correct answer Advanced Persistent Threat
Baiting correct answer A real-world trojan horse, e.g. USB
Basic requirements of IT infrastructure (5) correct answer Firewalls, secure
configuration, user access control, malware protection, patch management
Benefits of honeypots (3) correct answer Attack detection, deflect attackers,
gather information on attack strategies
Bitcoin miner correct answer Device attempting to resolve the mathematical
puzzle in order to achieve bitcoin
Botnet correct answer A group of compromised computers or mobile devices
connected to a network
Brute force attack correct answer Exhaustive search of all possible combinations
Carbanak APT correct answer 2013-2015. Unusual - cybercriminals not nation
states, wasn't that technologically advanced. Loss of $1 billion
Channel consolidation correct answer Concentration of data on a few providers
(data breach)
