🌍 All Study Guides 📊 Dashboard 📰 Blog 💡 About

IBM Cybersecurity Analyst Professional Certificate • STUDY MODE

PRACTICE QUIZ

QUESTION 1 OF 40

A cyber attack originating from which three (3) of the following would be considered a supply-chain attack? (Select 3)

An environmental activist group

E-mail providersCorrect Answer

SubcontractorsCorrect Answer

Web hosting companiesCorrect Answer

QUESTION 2 OF 40

Which three (3) of these were cited as the top 3 sources of third-party breach? (Select 3)

Cloud-based storage or hosting providersCorrect Answer

Online payment or credit card processing servicesCorrect Answer

JavaScript on websites used for web analyticsCorrect Answer

Security vulnerabilities in operating systems

QUESTION 3 OF 40

True or False. While data loss from a third-party breach can be expensive, third-party breaches account for less than 22% of all breaches.

True

FalseCorrect Answer

QUESTION 4 OF 40

According to a 2019 Ponemon study, what percent of consumers say they will defect from a business if their personal information is compromised in a breach? THIRD-PARTY BREACH GRADED ASSESSMENT

10%

51%

80%Correct Answer

92%

QUESTION 5 OF 40

True or False. According to a 2018 Ponemon study, organizations surveyed cited "A third-party misused or shared confidential information..." as their top cyber security concern for the coming year.

TRUECorrect Answer

False

QUESTION 6 OF 40

How effective were the processes for vetting third-parties as reported by the majority (64%) of the companies surveyed?

Highly effective

Effective

Somewhat or not effectiveCorrect Answer

Not effective at all

QUESTION 7 OF 40

In the first few months of 2020 data breaches were reported from Instagram, Carson City, Amazon, GE, T-Mobile, radio.com, MSU, and Marriot. While different data were stolen from each organization, which two data elements were stolen from all of them? (Select 2)

Corporate financial data

Personal informationCorrect Answer

Customer financial informationCorrect Answer

Confidential corporate strategy data

QUESTION 8 OF 40

True or False. More than 63% of data breaches can be linked to a third-party.

TrueCorrect Answer

False

QUESTION 9 OF 40

According to a 2019 Ponemon study, which is the most common course of action for a consumer who has lost personal data in a breach?

Tell others of their experienceCorrect Answer

Use social media to complain about their experience

Comment directly on the company)s website

File a complaint with the FTC or other regulatory body

QUESTION 10 OF 40

You get a pop-up message on your screen telling you that critical files on your system have been encrypted and that you must pay a fee to get the encryption key. What type of ransomware has attacked your system?

Blockware

CryptoCorrect Answer

Leakware/Doxware

Locker

QUESTION 11 OF 40

Your bank sends you an email with your account statement attached. You think this is odd but open it anyway to see what it is. The document is blank so you close it and think no more about it. A few days later you realize that your computer is infected with malware. What attack vector was used to compromise your system?

Remote Desktop Protocol (RDP)

Malicious Links

PhishingCorrect Answer

Software Vulnerabilities

QUESTION 12 OF 40

You take advantage of an Internet offer for free technical support and a live technician acutally does contact you, log into your computer and help you optimize your system. A few days later you notice some critical business files are missing when a big red message block appears on your screen demanding money if you ever want to see your files again. What attack vector is the malware exploiting?

Software Vulnerabilities

Phishing

Malicious Links

Remote Desktop Protocol (RDP)Correct Answer

QUESTION 13 OF 40

If you fail to patch your operating system and that fact allows a bad actor to install ransomware on your system, what was the likely attack vector?

Remote Desktop Protocol (RDP)

Software VulnerabilitiesCorrect Answer

Malicious Links

Phishing

QUESTION 14 OF 40

You read an interesting article online that contains links to related articles so you follow one of them and pretty soon you are a victim of a ransomware attack. What was the likely attack vector used by the bad actors?

Phishing

Remote Desktop Protocol (RDP)

Software Vulnerabilities

Malicious LinksCorrect Answer

QUESTION 15 OF 40

What is the most important thing to have in place that will save you from having to pay a ransom in the event you have fallen victim to a ransomware attack?

Fully patched operating system and applications

Strong passwords

Anti-virus software

A full system backupCorrect Answer

QUESTION 16 OF 40

Which ransomware spread across 150 countries in 2017 and was responsible for over $4 billion in losses worldwide?

Bad Rabbit

GoldenEye

Jigsaw

WannaCryCorrect Answer

QUESTION 17 OF 40

True or False. Projections are that ransomware will not be a significant problem in the future as operating systems become more secure and anti-malware applications gain in sophistication. RANSOMWARE GRADED ASSESSMENT

True

FalseCorrect Answer

QUESTION 18 OF 40

You get a pop-up message on your screen telling you have been locked out of your computer and that access will remain blocked until you pay a fee to have your access restored. What type of ransomware has attacked your system?

Blockware

Crypto

LockerCorrect Answer

Leakware/Doxware

QUESTION 19 OF 40

You get a pop-up message on your screen telling you that embarrassing photos taken of you at a college party many years ago have been downloaded and will be made public unless you pay a fee. What type of ransomware has attacked your system?

Leakware/DoxwareCorrect Answer

Blockware

Crypto

Locker

QUESTION 20 OF 40

You get an email from your Internet service provider addressed to "Dear Customer" asking you to log in and verify your credentials due to "suspicious activity" detected in your account. This email is most likely trying to exploit which attack vector?

Remote Desktop Protocol (RDP)

Malicious Links

PhishingCorrect Answer

Software Vulnerabilities

QUESTION 21 OF 40

A person you meet at a party offers to help you optimize your computer so you arrange for her to log in remotely. The next time you reboot your system, you get a pop-up message telling you all your critical files have been encrypted and you must pay a ransome to get the encryption key. What attack vector was used to exploit your system?

Phishing

Malicious Links

Software Vulnerabilities

Remote Desktop Protocol (RDP)Correct Answer

QUESTION 22 OF 40

You fear that the security patches sent out by the vendor of one of your products may introduce changes to what you are used to so you never allow the updates. What attack vector are you setting yourself up for?

Remote Desktop Protocol (RDP)

Software VulnerabilitiesCorrect Answer

Phishing

Malicious Links

QUESTION 23 OF 40

You log into your bank and see an offer for a 0% interest rate loan. You click on the link to check out the details and suddenly your computer is locked and there is a message demanding payment in order to unlock it. Your bank)s website was hacked! What attack vector was being used to install ransomware on your system?

Phishing

Remote Desktop Protocol (RDP)

Malicious LinksCorrect Answer

Software Vulnerabilities

QUESTION 24 OF 40

True or False. Being vigilant about email you receive, links your follow and websites you visit is an effective way to keep yourself safe from a ransomware attack.

TrueCorrect Answer

False

QUESTION 25 OF 40

Which ransomware used fake Adobe Flash download websites to distribute and install ransomware?

Bad RabbitCorrect Answer

GoldenEye

Jigsaw

WannaCry

QUESTION 26 OF 40

True or False. It is feared that in the future our cars, homes and factories may fall victim to ransomware attacks as more and more devices join the Internet of Things.

TrueCorrect Answer

False

QUESTION 27 OF 40

According to a 2019 Ponemon study, what percent of consumers say they will defect from a business if their personal information is compromised in a breach?

10%

51%

80%Correct Answer

92%

QUESTION 28 OF 40

True or False. According to a 2018 Ponemon study, organizations surveyed cited “A third-party misused or shared confidential information…” as their top cyber security concern for the coming year.

TRUECorrect Answer

False

QUESTION 29 OF 40

True or False. There are more successful PoS attacks made against large online retailers than there are against small to medium sized brick-and-mortar businesses.

True

FalseCorrect Answer

QUESTION 30 OF 40

Which is the standard regulating credit card transactions and processing?

PCI-DSSCorrect Answer

Sarbanes-Oxley (SOX)

GDPR

NIST SP-800

QUESTION 31 OF 40

Which three (3) of these are PCI-DSS requirements for any company handling, processing or transmitting credit card data? (Select 3)

Cardholder data may not reside on local PoS devices for more than 48 hours

Protect stored cardholder dataCorrect Answer

Install and maintain a firewall configuration to protect cardholder dataCorrect Answer

Do not use vendor-supplied defaults for system passwords and other security parametersCorrect Answer

QUESTION 32 OF 40

True or False. A study conducted by the Ingenico Group found that credit card transactions were sufficiently secure as long as all participants were in strict compliance with PCI-DSS standards.

True

FalseCorrect Answer

QUESTION 33 OF 40

What are the two (2) most common operating systems for PoS devices? (Select 2)

WindowsCorrect Answer

Mac i/OS

LinuxCorrect Answer

POSOS

QUESTION 34 OF 40

If your credit card is stolen from a PoS system, what is the first thing the thief is likely to do with your card data?

Use it as part of a larger identity theft scheme

Use it to buy merchandise

Sell it to a carder

Sell it to a distributorCorrect Answer

QUESTION 35 OF 40

PCI-DSS can best be described how?

A voluntary payment card industry data security standardCorrect Answer

A provision of the European GDPR that covers payment card data privacy regulations

A financial regulation in the United States covering the payment card industry that replaced Sarbanes-Oxley

A financial regulation in the United States that supplements Sarbanes-Oxley with missing provisions covering the payment card industry

QUESTION 36 OF 40

Which group suffers from the most PoS attacks?

Restaurants and small retail stores.Correct Answer

Large online retailers like Amazon.com

Social media companies like Facebook and Instagram.

Government agencies.

QUESTION 37 OF 40

Which three (3) of these control processes are included in the PCI-DSS standard? (Select 3)

Build and maintain a secure network and systemsCorrect Answer

Maintain a vulnerability management programCorrect Answer

Protect cardholder dataCorrect Answer

Require use of multi-factor authentication for new card holders

QUESTION 38 OF 40

Which three (3) additional requirements did the Ingenico Group recommend be used to enhance credit card transactions above and beyond the requirements found in PCI-DSS? (Select 3)

Mobile Device Management (MDM)Correct Answer

Employee EducationCorrect Answer

TokenizationCorrect Answer

Discontinue use of magnetic strip readers and cards

QUESTION 39 OF 40

When is credit card data most vulnerable to PoS malware?

While stored on the PoS device hard drive

While in RAMCorrect Answer

After the card data has been received by the credit card processor

While in transit between the PoS device and the credit card processing center

QUESTION 40 OF 40

Which scenario best describes how a stolen credit card number is used to enrich the thief?

Credit card thieves use stolen credit cards to buy merchandise that is then returned to the store in exchange for store credit that is sold at a discount for profit

Credit card thieves resell stolen card numbers to dark web companies that use call-center style operations to purchase goods on behalf of customers who pay for them at discounted rates using real credit cards

Credit card thieves sell stolen credit cards directly to carders using weekly dark web auctions. The carders then encode credit card blanks with the stolen numbers and resell the cards

Stolen credit card numbers are sold to brokers who resell them to carders who use them to buy prepaid credit cards that are then used to buy gift cards that will be used to buy merchandise for resaleCorrect Answer

Google Advanced Data Analytics

Google Cybersecurity Professional Certificate

Meta Marketing Analytics Professional Certificate

Google Digital Marketing & E-commerce Professional Certificate

Google UX Design Professional Certificate

Meta Social Media Marketing Professional Certificate

Google Project Management Professional Certificate

Meta Front-End Developer Professional Certificate

Ready to test your recall?

A cyber attack originating from which three (3) of the following would be considered a supply-chain attack? (Select 3)

💡Select all 3 correct answers before submitting (0 of 3 selected).

An environmental activist group

E-mail providers

Subcontractors

Web hosting companies

How confident are you in this answer?

PRACTICE QUIZ

A cyber attack originating from which three (3) of the following would be considered a supply-chain attack? (Select 3)

Which three (3) of these were cited as the top 3 sources of third-party breach? (Select 3)

True or False. While data loss from a third-party breach can be expensive, third-party breaches account for less than 22% of all breaches.

According to a 2019 Ponemon study, what percent of consumers say they will defect from a business if their personal information is compromised in a breach? THIRD-PARTY BREACH GRADED ASSESSMENT

True or False. According to a 2018 Ponemon study, organizations surveyed cited "A third-party misused or shared confidential information..." as their top cyber security concern for the coming year.

How effective were the processes for vetting third-parties as reported by the majority (64%) of the companies surveyed?

In the first few months of 2020 data breaches were reported from Instagram, Carson City, Amazon, GE, T-Mobile, radio.com, MSU, and Marriot. While different data were stolen from each organization, which two data elements were stolen from all of them? (Select 2)

True or False. More than 63% of data breaches can be linked to a third-party.

According to a 2019 Ponemon study, which is the most common course of action for a consumer who has lost personal data in a breach?

You get a pop-up message on your screen telling you that critical files on your system have been encrypted and that you must pay a fee to get the encryption key. What type of ransomware has attacked your system?

If you fail to patch your operating system and that fact allows a bad actor to install ransomware on your system, what was the likely attack vector?

You read an interesting article online that contains links to related articles so you follow one of them and pretty soon you are a victim of a ransomware attack. What was the likely attack vector used by the bad actors?

What is the most important thing to have in place that will save you from having to pay a ransom in the event you have fallen victim to a ransomware attack?

Which ransomware spread across 150 countries in 2017 and was responsible for over $4 billion in losses worldwide?

True or False. Projections are that ransomware will not be a significant problem in the future as operating systems become more secure and anti-malware applications gain in sophistication. RANSOMWARE GRADED ASSESSMENT

You get a pop-up message on your screen telling you have been locked out of your computer and that access will remain blocked until you pay a fee to have your access restored. What type of ransomware has attacked your system?

You get a pop-up message on your screen telling you that embarrassing photos taken of you at a college party many years ago have been downloaded and will be made public unless you pay a fee. What type of ransomware has attacked your system?

You get an email from your Internet service provider addressed to "Dear Customer" asking you to log in and verify your credentials due to "suspicious activity" detected in your account. This email is most likely trying to exploit which attack vector?

You fear that the security patches sent out by the vendor of one of your products may introduce changes to what you are used to so you never allow the updates. What attack vector are you setting yourself up for?

True or False. Being vigilant about email you receive, links your follow and websites you visit is an effective way to keep yourself safe from a ransomware attack.

Which ransomware used fake Adobe Flash download websites to distribute and install ransomware?

True or False. It is feared that in the future our cars, homes and factories may fall victim to ransomware attacks as more and more devices join the Internet of Things.

According to a 2019 Ponemon study, what percent of consumers say they will defect from a business if their personal information is compromised in a breach?

True or False. According to a 2018 Ponemon study, organizations surveyed cited &#8220;A third-party misused or shared confidential information&#8230;&#8221; as their top cyber security concern for the coming year.

True or False. There are more successful PoS attacks made against large online retailers than there are against small to medium sized brick-and-mortar businesses.

Which is the standard regulating credit card transactions and processing?

Which three (3) of these are PCI-DSS requirements for any company handling, processing or transmitting credit card data? (Select 3)

True or False. A study conducted by the Ingenico Group found that credit card transactions were sufficiently secure as long as all participants were in strict compliance with PCI-DSS standards.

What are the two (2) most common operating systems for PoS devices? (Select 2)

If your credit card is stolen from a PoS system, what is the first thing the thief is likely to do with your card data?

PCI-DSS can best be described how?

Which group suffers from the most PoS attacks?

Which three (3) of these control processes are included in the PCI-DSS standard? (Select 3)

Which three (3) additional requirements did the Ingenico Group recommend be used to enhance credit card transactions above and beyond the requirements found in PCI-DSS? (Select 3)

When is credit card data most vulnerable to PoS malware?

Which scenario best describes how a stolen credit card number is used to enrich the thief?

Ready to test your recall?

True or False. According to a 2018 Ponemon study, organizations surveyed cited “A third-party misused or shared confidential information…” as their top cyber security concern for the coming year.