Explain Cybersecurity DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A backup administrator notices that a vendor account with backup admin privileges has been used to delete old backup files at 3:00 AM for the past three nights. The vendor was not scheduled to perform any maintenance. Which threat category does this activity most likely represent, and which control should be applied first?

   • AMalware; run an antivirus scan on the backup server
   • BInsider threat; immediately revoke the vendor account's access and investigate
   • CPhishing; reset the vendor's password and enable MFA
   • DRansomware; restore the deleted files from an older backup
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A cloud service provider's backup environment is protected by network segmentation, endpoint protection on backup servers, and immutable backup storage that prevents modification or deletion. An attacker compromises one backup server through a phishing email. Which statement best describes the outcome?

   • AThe attacker may access that server, but the immutable storage and segmentation limit the blast radius
   • BThe endpoint protection will automatically remove the attacker from the network
   • CThe attacker will automatically gain access to all backup data because one server is compromised
   • DThe immutable storage will prevent the attacker from accessing the compromised server
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In the CIA triad, which goal ensures that data is not altered or destroyed by unauthorized parties?

   • AIntegrity
   • BAuthentication
   • CAvailability
   • DConfidentiality
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which type of malware is specifically designed to encrypt a victim's files and demand payment for the decryption key?

   • ATrojan horse
   • BWorm
   • CRansomware
   • DSpyware
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which statement best defines cybersecurity?

   • AThe process of encrypting all data stored on a company's servers to prevent unauthorized access
   • BThe practice of protecting internet-connected systems, including hardware, software, and data, from digital attacks
   • CThe management of user access rights to ensure only authorized personnel can log in to systems
   • DThe use of firewalls and antivirus software to block all external threats from entering a network
   Reveal Solution Discussion Select an answer first