Test on Cybersecurity: Concepts, Threats, and Defenses

Question 1: Implementing host-based Intrusion Detection Systems (HIDS) is explicitly listed as a defense mechanism against phishing attacks.

A. Ano

B. Ne

Explanation: The study materials list email filtering, multi-factor authentication, regular security awareness training, and prompt reporting of suspicious messages as defenses against phishing. HIDS are mentioned for monitoring individual servers for suspicious behavior, not as a specific defense against phishing attacks.

Question 2: Which of the following are identified as common causes of data breaches according to the study materials?

A. Stolen credentials

B. Hardware failures

C. Misconfigured cloud storage

D. Implementing strong encryption protocols

Explanation: The study materials list 'Stolen credentials' and 'Misconfigured cloud storage' as common causes of data breaches. 'Hardware failures' are identified as a threat to availability, not a common cause of data breaches. 'Implementing strong encryption protocols' is a protective measure, not a cause of a breach.

Question 3: Sandboxing suspicious file execution is a primary measure implemented within application security during the Secure SDLC to prevent code vulnerabilities.

A. Ano

B. Ne

Explanation: Sandboxing is a method where suspicious files execute in an isolated virtual environment to observe their behavior safely. The study materials list Application Security as implementing measures within software during development and deployment, including Secure SDLC, OWASP Top 10, testing, and patch management. Sandboxing is described separately and not as a primary measure within the Secure SDLC framework for preventing code vulnerabilities.

Question 4: In application security, which statement accurately describes the roles of Static Analysis (SAST) and Dynamic Analysis (DAST)?

A. SAST reviews network packets, while DAST monitors running programs in real time.

B. SAST reviews source code, and DAST tests running applications.

C. SAST focuses on patching vulnerabilities, and DAST on encrypting data at rest.

D. Both SAST and DAST are used to create isolated virtual environments for suspicious files.

Explanation: Static Analysis (SAST) reviews source code, and Dynamic Analysis (DAST) tests running applications. Together, they identify flaws at every stage of development.

Question 5: Social engineering attacks typically succeed by exploiting advanced software vulnerabilities rather than human psychology.

A. Ano

B. Ne

Explanation: Social engineering bypasses technical controls by manipulating people, exploiting emotions like urgency, fear, and authority to override rational judgment. The study materials state that it exploits human psychology, not primarily advanced software vulnerabilities.