CYBERSECURITY EXAM QUESTIONS AND ANSWERS GRADED
A+ 2026/2027.
List at least three kinds of damage a company could suffer when the
integrity of a program or company data is compromised. Answer >>>
Data Loss - A hacker leaks the social security numbers and private
information of people staying at a five-star hotel. The hotel is insured as
well as the people; however, a guest of the hotel sues due to
psychological damages of identity theft.
Reputation - An Antivirus company is attacked by malware that avoids
detection. When the company sends out an update, the malware is
installed in each user’s computer and records the user’s keystrokes.
People no longer trust the Antivirus company even though a quick
patch is created and no damage is done.
Internal Damage - A sales company hires a new IT intern. The intern
somehow changes the format of the website that it goes down for 24
hours. No member of the company can work, and the company loses a
full day of revenue. The intern is shortly fired.
Financial: When a program's integrity or data is compromised, there is
always the potential for financial loss. The company's online
marketplace or website could be shut down, causing a loss of business
and money.
,CYBERSECURITY
List at least three kinds of harm a company could encounter from loss
of service, that is, failure of availability. List the product or capability to
which access is lost, and explain how this loss hurts the company.
Answer >>> Loss of Potential Customers: If your website is not available
for an extended period of time, customers looking for your service will
click on your link, see that it is a dead link, and then move on to one of
your competitors for the service. This also may affect some of your
current customers with the service not being available to them for an
extended period of time which may force them to choose a service that
is available. This negatively affects the company because it pushes away
customers which makes the company lost revenue.
Productivity Loss: If the company's servers are down and the
employee's cannot access the files and data they need, nothing will get
done at this company until the problem is resolved.
Discovery: When a company is suffering from failure of availability, new
customers trying to access the company via the internet may believe
that the company no longer exists or is closed down. If the failure of
availability if affecting the company's servers that provide their
advertising, the company may lose out on potential customers who
may have an interest in the company's product.
Dependability: If a company has issues with frequent loss of service,
customers' faith with the company may begin to dwindle overtime. If
customers are unable to access the company's services, they may begin
to take their interests elsewhere, resulting in a lost customer for the
company, and therefore, a loss in sales.
, CYBERSECURITY
Distinguish between vulnerability, threat, and control. Answer >>> A
vulnerability is any weakness in a system that could be manipulated,
which could cause unwanted effects. Not having proper user
identification procedures, such as security questions and strong
passwords could lead to a vulnerability.
A threat is anything that could potentially cause harm to a system, as a
result of a vulnerability. Threats can be started by humans or
computers themselves. A threat can even be a natural disaster that
would wreak havoc on a system.
Controls help prevent vulnerabilities so threats are less likely to occur.
Controls can be techniques or a device (fingerprint scanner) used to
reduce vulnerabilities.
Define and describe confidentiality, integrity, and availability of data.
Answer >>> Confidentiality is the aptitude of a system to guarantee
that an asset is viewed only by authorized parties. If something is
confidential, only authorized people or systems can gain access to the
protected data. The term "confidentiality" is often used in relation to
data. Examples of breaches in confidentiality are an unauthorized
person accesses a data item, a person authorized to access certain data
accesses other data not authorized, or an unauthorized person learns
the existence of a piece of data. One word that captures most aspects
of confidentiality is view: look but do not touch. In computer security,
confidentiality typically means finding but not altering.