CTEC IT Unit 3 PH Virtual Challenges

What are some potential threats to PH Virtual Challenges and its held data?

Tick all that apply

• Service disruptions through denial of service attacks

• Unauthorized access to customer activity data

• Vulnerabilities in the system leading to exploitation by attackers

• Unauthorized access to user profile pictures

How would PH Virtual Challenges initially respond to a cyber security incident

Tick all that apply

• Hiding the incident from customers

• Containing the incident

• Eradicating the scope of the incident

• Firing all employees involved with the breach

What kind of data is collected by PH Virtual Challenges?

• Virtual Challenge level

• Ages and genders of customers

• Latitude and Longitude of activity locations

• Timestamp including date

Why does the data collected by PH Virtual Challenges need protection?

Tick all that apply

• location data allows tracking

• A regular backup schedule is in place

• Lack of encryption on user data

• Contains personally identifiable information

Which are cyber security risk management measures

Tick all that apply

• Identifying assets

• Testing for vulnerabilities

• Monitoring and controlling systems

• Limiting data access

Encryption is useful for controlling access to

• Data in use

• Data in the cloud

• Data in transit

• Data at rest

PH Virtual Challenges could be attacked by various threat actors.
What type of attacker is missing from this list:

hacktivist, cyber-criminal, script kiddie,

scammer, phisher, insider, cyber-terrorist

A Cyber Security Incident Report includes several sections

match data to each section by dragging and dropping

• external email

  sandboxing

• incident title

• minor

• target of incident

• finance staff

• future management

• HSBC online reset password email

• incident category

• phisher

• type of attacker

Put the stages of response to a cyber security attack in chronological order from first to last

• recover from the incident

• contain the incident

• eradicate the incident

• know extent of incident

• reduce the impact of the incident

What can a user do from the PH virtual challenges website

• Sign up to complete virtual challenges

• View the progress of others completing the challenges

• Plot their locations and times of exercise on a map

• Upload tracking data from their own fitness exercises

• See the details of data they have uploaded