Examkin

Question

Difficulty: EasyInformation Technology and Cybersecurity

Which of the following statements regarding common cybersecurity threats and security mechanisms are correct?

  1. Phishing is a social engineering attack where deceptive messages are used to trick individuals into revealing sensitive credentials or information.Answer
  2. Ransomware is malicious software designed to block access to data or systems, typically by encrypting files, until a ransom is paid.Answer
  3. C
    A firewall is designed to block all incoming network traffic regardless of configured security rules.
  4. D
    Symmetric key cryptography uses two different keys: a public key for encryption and a private key for decryption.

Answer

The statements defining Phishing as a deceptive credential-harvesting attack and Ransomware as file-encrypting extortion malware are correct.
The correct statements correctly describe social engineering (phishing) and extortion malware (ransomware). Both represent foundational concepts in information security awareness.

Step-by-Step Solution

1
Evaluate the definition of Phishing.
Confirmed correct. Phishing uses fraudulent communications (emails, websites) to trick targets into providing sensitive information.
Matches the fundamental definition of social engineering in information security.
2
Evaluate the definition of Ransomware.
Confirmed correct. Ransomware locks or encrypts system resources to extort payment from victims.
Matches standard cybersecurity classification of malware behaviors.
3
Evaluate the description of a Firewall.
Confirmed incorrect. Firewalls inspect traffic according to defined rules (allowing legitimate traffic and blocking unauthorized traffic), not blocking everything blindly.
Misinterprets network security filtering mechanisms.
4
Evaluate the statement regarding Symmetric Cryptography.
Confirmed incorrect. Dual public/private keys are used in asymmetric (public-key) cryptography, not symmetric cryptography.
Confuses symmetric and asymmetric cryptographic key structures.

Key Concept

Basic Cybersecurity Threat Vector Definitions and Security Controls
Rate this question

Topics

Information Technology and Cybersecurity

More questions from this topic