Cybersecurity Incident Response Quiz

What is the primary issue with the phishing emails received by TechCorp employees?

• They contain a link to a legitimate website.

• They appear to be from the HR department and lead to a fake website.

• They are sent from external email addresses.

• They contain harmless attachments.

What is the consequence of an employee clicking on the phishing email link?

• The employee's computer becomes faster.

• The employee's computer downloads malware.

• The employee's computer receives a software update.

• The employee's computer is unaffected.

Which of the following is a major security issue identified at TechCorp?

• Employees using strong passwords.

• Employees using weak passwords.

• Employees using two-factor authentication.

• Employees using password managers.

What is the risk associated with unpatched software at TechCorp?

• It improves system performance.

• It has no impact on security.

• It contains known vulnerabilities.

• It automatically updates itself.

What should be done about the ex-employee who still has access to TechCorp's systems?

• Grant them more access.

• Revoke their access immediately.

• Ignore the issue.

• Send them a warning email.

What is the primary issue faced by MedHealth Inc. during the ransomware attack?

• The attackers have encrypted critical patient records.

• The attackers have improved system security.

• The attackers have provided free software.

• The attackers have fixed system bugs.

Why is the lack of recent backups a significant problem for MedHealth Inc.?

• It makes data recovery difficult.

• It improves data security.

• It reduces storage costs.

• It speeds up system performance.

How did the attackers gain access to MedHealth Inc.'s network?

• Through a secured VPN connection.

• Through an unsecured remote desktop protocol (RDP) connection.

• Through a physical break-in.

• Through a legitimate software update.

What is a critical component missing from MedHealth Inc.'s incident response plan?

• A list of emergency contacts.

• A comprehensive incident response plan.

• A detailed marketing strategy.

• A financial audit report.

What is the risk associated with data exfiltration during the ransomware attack?

• The data is securely stored.

• The data is at risk of being publicly released or sold.

• The data is automatically encrypted.

• The data is backed up securely.