Cyber Security Interim Homework

Which UK law gives you the right to access the data an organisation stores on you?

• The Freedom of Information Act

• The Computer Misuse Act

• The Data Protection Act

• The Copyright, Designs, and Patents Act

Why might a company collect information about you to form a profile? (Which two of the following apply)

• So that they can recommend products to you based on previous products you have purchased or viewed.

• So that they can sell the information to marketing companies

• So that they can sell the information onto cybercriminals without your permission.

Is the following data or information:

"Sophie got 38 out of 40 on her English test"

• Data

• Information

When data has been processed and is meaningful, which of these has it become?

• Information

• Processed data

• Identifiable data

• Profiled

What is the purpose of the Data Protection Act?

• To protect an organisation from hackers

• To require organisations that store data on people to use it responsibly and keep it safe.

• To act as a deterrent to cybercriminals who try to steal data on people

• To prevent cybercriminals from spreading a virus

What is social engineering?

• Methods used by cybercriminals to deceive individuals into handing over information

• Hacking a system by taking control of someone else's computer

• Using the computer of someone who has accidently left themselves logged on

• A malicious attempt to disrupt a server or network by flooding it with internet traffic

You receive an email from an unknown sender asking for money. The sender wants you to respond to the email. There are no hyperlinks in the email, but it includes unusual use of English and there are a number of spelling mistakes. What type of social engineering attempt is this?

• Shouldering

• Phishing

• Spam

• Blagging

Which of the following describes a name generator attack?

• Software used to randomly create accounts that post to social media

• Attackers create an online quiz to produce a name; the answers to the quiz find out key pieces of information that can help them to answer the security questions protecting people's accounts

• An attack that makes multiple attempts to guess a username and password

• A form of identity theft conducted online

"An attack that involves an attacker watching the victim while they provide sensitive information" is a description of which of the following?

• Phishing

• Blagging

• Name generator attack

• Shouldering

‘Gaining unauthorised access to or control of a computer system’ is a definition of which type of cybercrime?

• Hacking

• Viruses

• Social engineering

• Phishing