Cybersecurity

---

1. What is Cybersecurity?

• Protection of systems, networks, and data from cyberattacks.
• Goal: Ensure Confidentiality, Integrity, and Availability (CIA) of information.

---

2. Types of Cyber Threats

1. Malware: Malicious software like viruses, worms, trojans, ransomware.
2. Phishing: Fraudulent attempts to steal sensitive information via fake emails or messages.
3. Denial of Service (DoS): Overloading a server to make it unavailable.
4. Man-in-the-Middle (MITM): Intercepting communication between two parties.
5. SQL Injection: Exploiting databases by injecting malicious SQL code.
6. Zero-Day Exploit: Attacking vulnerabilities before they’re patched.

---

3. Cybersecurity Measures

1. Firewalls: Filter incoming and outgoing network traffic.
2. Antivirus Software: Detects and removes malicious programs.
3. Encryption: Secures data by converting it into unreadable code.
4. Multi-Factor Authentication (MFA): Adds extra layers of security (e.g., password + OTP).
5. Access Controls: Limits access to sensitive systems.
6. Regular Updates: Ensures systems are patched against vulnerabilities.

---

4. Cybersecurity Principles (CIA Triad)

1. Confidentiality: Data accessible only to authorized users.
2. Integrity: Data is accurate and unchanged by unauthorized actions.
3. Availability: Systems and data are accessible when needed.

---

5. Types of Hackers

1. White Hat Hackers: Ethical hackers working to secure systems.
2. Black Hat Hackers: Malicious hackers causing harm or stealing data.
3. Grey Hat Hackers: Operate between ethical and unethical boundaries.

---

6. Key Cybersecurity Terms

1. Vulnerability: Weakness in a system.
2. Threat: Potential cause of harm to a system.
3. Risk: Likelihood of a threat exploiting a vulnerability.
4. Attack Vector: Path through which a hacker gains unauthorized access.
5. Incident Response: Process to address a cybersecurity breach.

---

7. Cybersecurity Laws and Standards

1. GDPR: Protects personal data in the EU.
2. IT Act 2000 (India): Regulates cybercrime and e-commerce.
3. ISO 27001: International standard for managing information security.
4. HIPAA: Protects medical information (USA).

---

8. Common Cybersecurity Tools

1. Wireshark: Network analysis tool.
2. Kali Linux: Used for penetration testing.
3. Metasploit: Exploitation framework for finding vulnerabilities.
4. Snort: Intrusion detection system.

---

9. Social Engineering Attacks

• Manipulating people to reveal confidential information.
• Examples: Phishing, Pretexting, Baiting, Tailgating.

---

10. Emerging Cybersecurity Trends

1. Artificial Intelligence (AI): Detects and responds to threats faster.
2. Zero Trust Architecture: Verifies all users and devices before granting access.
3. Blockchain Security: Immutable ledgers to prevent tampering.
4. IoT Security: Protecting interconnected devices from hacking.

---

11. Basic Security Practices for Users

1. Use strong, unique passwords.
2. Avoid clicking on suspicious links or attachments.
3. Enable two-factor authentication.
4. Regularly back up data.
5. Keep software updated.

---

12. Cybersecurity Certifications (For Professionals)

1. CEH (Certified Ethical Hacker)
2. CISSP (Certified Information Systems Security Professional)
3. CompTIA Security+
4. CISA (Certified Information Systems Auditor)

---

Quick Revision Points

1. Cyber Threats: Malware, Phishing, DoS, MITM, SQL Injection.
2. Measures: Firewalls, Antivirus, Encryption, MFA, Access Controls.
3. CIA Triad: Confidentiality, Integrity, Availability.
4. Hacker Types: White Hat, Black Hat, Grey Hat.
5. Tools: Wireshark, Kali Linux, Metasploit.
6. Trends: AI, Blockchain, IoT Security.

---

2. What does the “C” in the CIA triad stand for in cybersecurity?
A. Control
B. Cybersecurity
C. Confidentiality
D. Connection

Answer: C. Confidentiality

3. Which of the following is NOT a type of malware?
A. Worm
B. Phishing
C. Trojan
D. Ransomware

Answer: B. Phishing

4. What is phishing?
A. Encrypting files to make them inaccessible
B. A technique to manipulate users into revealing sensitive information
C. A way to redirect network traffic to fake websites
D. A virus that self-replicates

Answer: B. A technique to manipulate users into revealing sensitive information

5. What is the primary function of a firewall?
A. To create backup copies of data
B. To detect and remove malware
C. To filter incoming and outgoing network traffic
D. To encrypt data

Answer: C. To filter incoming and outgoing network traffic

6. Which of the following is a popular tool used for network analysis?
A. Metasploit
B. Wireshark
C. Kali Linux
D. Snort

Answer: B. Wireshark

7. What is the purpose of encryption in cybersecurity?
A. To speed up data transmission
B. To make data unreadable to unauthorized users
C. To eliminate viruses from a system
D. To compress data for storage

Answer: B. To make data unreadable to unauthorized users

8. Which of the following is an example of a Denial of Service (DoS) attack?
A. Intercepting data between two communicating devices
B. Overloading a server to make it unavailable
C. Installing malware on a system
D. Stealing login credentials

Answer: B. Overloading a server to make it unavailable

9. What is the No-Cloning Theorem in cybersecurity?
A. Data cannot be backed up multiple times
B. Quantum states cannot be exactly copied
C. Hackers cannot clone a network’s architecture
D. Files cannot be cloned without admin rights

Answer: B. Quantum states cannot be exactly copied

10. Which algorithm is commonly used in data encryption?
A. RSA
B. Dijkstra’s Algorithm
C. Grover’s Algorithm
D. Depth-First Search

Answer: A. RSA

11. What is SQL Injection?
A. A technique to bypass firewalls
B. Injecting malicious SQL code into a database query
C. A way to encrypt SQL queries
D. Injecting data into a secure website

Answer: B. Injecting malicious SQL code into a database query

12. Which cybersecurity tool is known for penetration testing?
A. Metasploit
B. Microsoft Excel
C. Tableau
D. AutoCAD

Answer: A. Metasploit

13. What is the function of Multi-Factor Authentication (MFA)?
A. To improve system processing speed
B. To use multiple layers of security for user authentication
C. To encrypt user passwords
D. To detect malware on a network

Answer: B. To use multiple layers of security for user authentication

14. What is the role of Intrusion Detection Systems (IDS)?
A. To prevent unauthorized access
B. To detect suspicious network activity
C. To encrypt sensitive data
D. To monitor user behavior

Answer: B. To detect suspicious network activity

15. Which type of hacker works ethically to secure systems?
A. Black Hat Hacker
B. Grey Hat Hacker
C. White Hat Hacker
D. Script Kiddie

Answer: C. White Hat Hacker

16. What is the primary purpose of GDPR?
A. To monitor hackers
B. To enhance data privacy in the European Union
C. To regulate cloud storage services
D. To encrypt public data

Answer: B. To enhance data privacy in the EU

17. Which cybersecurity principle ensures data is accurate and not tampered with?
A. Confidentiality
B. Integrity
C. Availability
D. Scalability

Answer: B. Integrity

18. What is the most common type of attack on IoT devices?
A. Ransomware
B. Brute force
C. Man-in-the-Middle (MITM)
D. Botnet attacks

Answer: D. Botnet attacks

19. What is ransomware?
A. Malware that self-replicates
B. Malware that encrypts files and demands payment to unlock them
C. Malware that spies on user activity
D. A denial-of-service attack

Answer: B. Malware that encrypts files and demands payment to unlock them

20. What is a zero-day vulnerability?
A. A vulnerability detected on the first day of system deployment
B. A flaw that is exploited before a patch is released
C. A hardware-related issue
D. A network configuration error

Answer: B. A flaw that is exploited before a patch is released

21. Which tool is commonly used for creating secure communication protocols?
A. SSL/TLS
B. SQL
C. HTML
D. CSS

Answer: A. SSL/TLS

22. What is the primary function of Kali Linux?
A. Malware analysis
B. Penetration testing and security auditing
C. Creating firewalls
D. Managing user authentication

Answer: B. Penetration testing and security auditing

23. What is social engineering in cybersecurity?
A. Using software to create secure systems
B. Manipulating people to divulge sensitive information
C. Studying the structure of social networks
D. Encrypting data for secure transmission

Answer: B. Manipulating people to divulge sensitive information

• X
• Instagram
• WhatsApp