Network Vulnerabilities & Business Impact

What type of attack involves intercepting data transmitted between network devices?

• Tapping/Eavesdropping

• Denial of Service

• Phishing

• SQL Injection

Answer explanation

Tapping/Eavesdropping is the correct choice as it specifically refers to intercepting data transmitted between network devices, allowing unauthorized access to sensitive information.

Which vulnerability affects communication lines according to network security principles?

• Crosstalk and radiation

• Only software bugs

• User passwords only

• Firewall settings

Answer explanation

Crosstalk and radiation are vulnerabilities that can interfere with communication lines, affecting data integrity and security. Other options like software bugs and firewall settings do not directly pertain to communication line vulnerabilities.

In the threat hierarchy, which category includes fire and power failure?

• Natural causes

• Malicious intent

• Directed attacks

• Random attacks

Answer explanation

Fire and power failure are categorized as 'Natural causes' because they result from environmental factors rather than human actions or malicious intent.

What is an example of a "benign intent" human-caused threat?

• Human error/misconfiguration

• Ransomware attack

• Data theft

• Impersonation

Answer explanation

Human error/misconfiguration is a benign intent threat as it arises from unintentional mistakes rather than malicious intent, unlike ransomware attacks, data theft, or impersonation, which are deliberate harmful actions.

Which type of loss involves disruption to normal business operations?

• Operational loss

• Reputational loss

• Financial loss

Answer explanation

Operational loss refers to disruptions in normal business operations, such as system failures or process breakdowns. This directly impacts the ability to conduct business effectively, making it the correct choice.

What is the maximum GDPR fine for data protection breaches?

• €20 million or 4% of global turnover

• €10 million or 2% of global turnover

• €5 million or 1% of global turnover

• €50 million or 10% of global turnover

Answer explanation

The maximum fine under GDPR for data protection violations is €20 million or 4% of global turnover, whichever is higher. This reflects the regulation's emphasis on serious penalties for non-compliance.

What does PCI-DSS stand for?

• Payment Card Industry Data Security Standard

• Personal Card Information Data Security Standard

• Payment Card International Data Security Standard

• Protected Card Industry Data Security Standard

Answer explanation

PCI-DSS stands for Payment Card Industry Data Security Standard, which is the correct choice. It sets security standards for organizations that handle credit card information.

How many main requirements does PCI-DSS have?

• 12

• 10

• 15

• 8

Answer explanation

The PCI-DSS (Payment Card Industry Data Security Standard) has 12 main requirements that organizations must follow to ensure the security of cardholder data. Therefore, the correct answer is 12.

Which type of loss includes damage to an organisation's trustworthiness?

• Reputational loss

• Operational loss

• Financial loss

• Legal loss

Answer explanation

Reputational loss refers to damage to an organization's trustworthiness and public perception. This type of loss can significantly impact customer loyalty and business opportunities, making it the correct choice.

What is a single point of failure in a network?

• A component whose failure would cause entire system failure

• A backup system

• Multiple redundant connections

• A firewall rule

Answer explanation

A single point of failure refers to a component whose failure would lead to the entire system failing. This highlights the importance of redundancy in network design to prevent such vulnerabilities.