Operational Security Awareness Quiz

Phishing attacks can be mitigated by training employees to recognize and avoid clicking on suspicious emails, links, or attachments.

DDoS attacks aim to overwhelm and disable online services, making them inaccessible to legitimate users.

Steganography involves hiding data within other files or media to conceal its existence, adding an extra layer of security.

Brute force attacks involve attempting to guess passwords through repeated, exhaustive efforts; they are not a common type of phishing attack.

A security camera is an example of a physical security measure, providing surveillance to deter and monitor unauthorized access.

Firewalls are not physical security measures; they are network security devices that control incoming and outgoing traffic based on predetermined security rules.

Social engineering involves manipulating individuals to divulge confidential information or perform actions against their own interests through psychological tactics.

Sharing passwords with others compromises the security of mobile devices; it is not a recommended practice.

Secure data disposal involves overwriting data multiple times with random patterns to prevent recovery and unauthorized access.

Using personal information in passwords weakens security; strong passwords should avoid easily guessable details.

The principle of least privilege involves providing users with the minimum access rights needed to accomplish their tasks, reducing the risk of unauthorized access.

VPNs establish secure, encrypted connections over unsecured networks, ensuring confidentiality and integrity of data during transmission.

Firewall is not a type of malware; it is a network security device that monitors and controls network traffic.

Penetration testing assesses the security of a system by simulating cyberattacks to identify vulnerabilities and weaknesses in security controls.

Symmetric encryption uses a single key for both encryption and decryption, while asymmetric encryption involves a pair of public and private keys for secure communication.