Câu hỏi về bảo mật thông tin

What is the main objective of security in information systems?

• Increase system speed

• Maximize resource utilization

• Ensure confidentiality, integrity, non-repudiation, and availability

• Reduce software complexity

What does 'security' mean in the context of security?

• Ensure data accuracy and integrity

• Protect data from unauthorized access

• Maximize system performance

• Prevent data loss due to hardware failure

Which of the following measures is an example of ensuring data 'integrity'?

• Firewall

• Antivirus software

• Data encryption

• Digital signature

What is the main objective of a 'Denial of Service' (DoS) attack?

• Unauthorized access to sensitive data

• Alter data without detection

• Disrupt or degrade system accessibility

• Bypass firewalls

What type of attack deceives users into revealing sensitive information such as passwords or credit card numbers?

• Denial of Service (DoS)

• Spoofing

• Phishing

• Man-in-the-Middle (MitM)

What is the purpose of a 'Brute Force' attack?

• Unauthorized access by exploiting system vulnerabilities

• Decrypting data using trial and error

• Disrupting network

• Spreading malware

What characteristic is of a 'Zero-Day' vulnerability?

• Targets vulnerabilities that have never been known

• Relies on social engineering techniques

• Only affects outdated software

• Requires physical access to the target system

8. Mục tiêu chính của tấn công "Người trung gian" (MitM) là gì?

• Làm gián đoạn liên lạc mạng

• Làm sập hệ thống bằng lượng lớn lưu lượng

• Chặn và có thể thay đổi thông tin liên lạc giữa hai bên

• Khai thác lỗ hổng phần mềm để truy cập trái phép

What is a 'Zero-Day' vulnerability?

• Targets vulnerabilities that have never been known

• Relies on social engineering techniques

• Only affects old software

• Requires physical access to the target system

What is the main objective of a 'Man-in-the-Middle' (MitM) attack?

• Disrupt network communication

• Intercept and potentially alter communication between two parties

• Crash the system with a large amount of traffic

• Exploit software vulnerabilities for unauthorized access