Topics

Cybersecurity

27 free questions with worked answers, and 599 more in the full bank.

Free questions

More Cybersecurity questions (page 6 of 10)

Answers and explanations are in the full bank.

• A national payment system must keep running even if its main data centre is destroyed. Which recovery site provides this with almost no delay? · 3 marks
• Before writing a continuity plan, a ministry studies which of its services are most critical and what an outage of each would cost over time. What is this study called? · 2 marks
• The ICT and management teams of a district meet for two hours to talk through, step by step, how they would respond to an imagined ransomware attack, without touching any systems. What is this? · 2 marks
• Why should an organisation regularly test restoring files from its backups? · 1 mark
• A server has a full backup on Sunday and incremental backups every other night. It fails on Thursday morning. What is needed to restore it to Wednesday night? · 3 marks
• A district's web server is missing a critical security patch, and criminal groups are known to be scanning for that flaw. In risk terms, what is the missing patch? · 2 marks
• A company buys cyber insurance to cover the costs of a possible data breach. Which way of treating risk is this? · 1 mark
• After installing a firewall, backups and staff training, some risk of a successful attack still remains. What is this remaining risk called? · 1 mark
• Under Rwanda's law on the protection of personal data and privacy (Law No 058/2021), which body acts as the supervisory authority with which organisations processing personal data must register? · 2 marks
• A district hospital decides what patient data to collect and why, and pays a cloud company to store it. Under data protection law, what are the hospital and the cloud company? · 3 marks
• An online job-application form for a district asks for applicants' religion and blood group, which have nothing to do with the job. Which data protection principle does this break? · 1 mark
• A citizen writes to an agency asking to see all the personal data it holds about them. Which right is the citizen exercising? · 2 marks
• Why do organisations label documents as Public, Internal, Confidential or Restricted? · 1 mark
• A district discovers that a database of citizens' personal data has been stolen. Under data protection law, who must normally be notified? · 2 marks
• New staff at a ministry sign a document that sets out what they may and may not do with office computers, email and internet access. What is this document? · 1 mark
• Which policy requires staff to lock away sensitive papers and lock their screens whenever they leave their desks? · 1 mark
• The entrance to a data centre has two doors, and the second opens only after the first has closed and the person inside has been identified. What is this arrangement called? · 2 marks
• A supplier's technician arrives to repair the air conditioning in a ministry's server room. Which practice is correct? · 1 mark
• A district is disposing of old PCs whose hard drives held citizens' records. What makes the data unrecoverable? · 2 marks
• Why is overwriting a solid-state drive (SSD) with zeros not a reliable way to destroy its data? · 3 marks
• A ministry laptop holding staff records is stolen from a car. Which control would have kept the data unreadable to the thief? · 2 marks
• What does Secure Boot, supported by a PC's firmware and TPM chip, protect against? · 3 marks
• A director's work phone, which receives official email, is lost at a conference. Which tool lets the ICT team erase the work data remotely? · 2 marks
• Staff want to read work email on their personal phones. Which approach protects work data while respecting their privacy? · 2 marks
• To stop confidential files being copied onto flash drives, what can administrators enforce on office PCs? · 1 mark
• On the PCs that run a district's payment system, administrators want to ensure that only approved programs can run at all. Which control does this? · 3 marks
• A hospital's records travel over HTTPS between clinics and the server, and are stored on disks encrypted with AES. Which statement is correct? · 2 marks
• An agency runs its own virtual servers on an IaaS cloud platform. Under the shared responsibility model, who must patch the servers' operating systems? · 3 marks
• Scanned copies of applicants' ID cards are found openly downloadable on the internet. Investigation shows the cloud provider's own systems were not breached. What is the most likely cause? · 2 marks
• A university sets up a fake server that looks like a poorly protected database, with no real data, to attract attackers and study their methods. What is it called? · 2 marks
• An investigator finds that an employee has been hiding confidential text inside ordinary-looking holiday photos sent by email. What is this technique called? · 1 mark
• The private key of a ministry's web server certificate is stolen, although the certificate is valid for another year. What must be done so that browsers stop trusting it? · 3 marks
• Which of the following is personal data under data protection law? · 1 mark
• Which type of malware attaches itself to a program or document and spreads only when that infected file is opened or run? · 1 mark
• Overnight, a piece of malware spreads from one PC to hundreds of others across a university network by exploiting a flaw in a network service, without anyone opening a file. What type is it? · 1 mark
• A “free PDF converter” downloaded from an unofficial site converts files exactly as promised, but it also quietly gives an attacker access to the computer. What kind of malware is this? · 2 marks
• Staff at a sector office find that their documents will no longer open and a message demands payment in cryptocurrency for a decryption key. What type of malware is this? · 1 mark
• Why do security agencies advise organisations not to pay a ransomware demand? · 2 marks
• A company restores all its files from backups after a ransomware attack, but the criminals then threaten to publish its customers' data unless it pays. What tactic is this? · 3 marks
• Software installed without the user's knowledge secretly records the websites they visit and sends the information to a third party. What is it called? · 1 mark
• An accountant's long, unique online banking password was stolen, although it was never written down or reused. Malware on the PC had recorded everything typed. What was it? · 1 mark
• After a teenager installs a free game on the family laptop, advertising pop-ups appear constantly, even when no browser is open. What has most likely been installed? · 1 mark
• Which type of malware is designed to hide its own files, processes and registry entries from the operating system and from security tools, often by running with the highest privileges? · 2 marks
• An attacker can see a victim's screen, turn on the webcam, browse files and run commands on an infected PC from far away. What type of malware provides this? · 2 marks
• Thousands of infected home and office computers all receive instructions from the same attacker-controlled server and are used together to send spam or flood websites. What are they part of? · 2 marks
• A programmer adds hidden code to a payroll system that will delete the salary database if the programmer's own name is ever removed from the staff list. What is this? · 2 marks
• An attack runs entirely through PowerShell commands loaded into memory, using built-in Windows tools and leaving almost no files on disk. Why is this kind of malware hard for traditional file scanning to catch? · 3 marks
• Several office PCs have become very slow, their fans run loudly all day and Task Manager shows an unknown process using almost 100% of the CPU. What is a likely cause? · 2 marks
• Security researchers find that each copy of a piece of malware looks different, because it rewrites or re-encrypts its own code every time it spreads. What is this called? · 3 marks
• An emailed Word document shows the message “Enable content to view this document”. Clicking it would run code stored inside the document. What kind of threat is this? · 1 mark
• A small program that arrives in an email attachment does nothing harmful itself; its only job is to download and install other malware, such as ransomware, onto the machine. What is it called? · 3 marks
• Malware that looks like ransomware encrypts and overwrites an organisation's disks, but analysts find there is no way to decrypt them, even for the attackers. What kind of malware is it? · 3 marks
• While browsing, a user sees a flashing window claiming “Your PC is infected with 27 viruses! Buy SuperCleaner now to remove them.” What is this? · 1 mark
• A phone app installed from a link in a text message asks for permission to read SMS messages and to use accessibility services. Soon afterwards, money is withdrawn from the owner's mobile money account. What most likely happened? · 3 marks
• A user's browser homepage and default search engine have changed to an unfamiliar site, and searches keep being redirected through advertising pages. What is the likely cause? · 2 marks
• After running a “free game activator”, a user finds that attackers have logged into several of their online accounts without needing passwords or MFA codes. Which kind of malware most likely caused this? · 3 marks
• A malicious program keeps coming back after every reboot, even though a technician ends its process each time. Where is it most likely set to start from? · 3 marks
• While installing a free media player, a technician notices pre-ticked offers to add a toolbar and a “PC optimiser”. How should the installation be done? · 2 marks
• An email attachment appears as “Invoice_March.pdf”, but its icon looks like an application. Windows is hiding known file extensions. What is the real name most likely to be? · 2 marks
• Attackers increasingly send malware inside password-protected ZIP files or disk-image (ISO) attachments, with the password in the email text. Why? · 2 marks