Cybersecurity Fundamentals & Concepts Flashcards

What is the purpose of cybersecurity?

Answer: To protect systems and data from unauthorized access, attacks, and damage.

The core purpose of cybersecurity is to safeguard digital assets, including computer systems, networks, and data, from various threats. This involves implementing measures to prevent unauthorized access, detect and respond to cyberattacks, and mitigate potential damage. Ultimately, cybersecurity aims to ensure the confidentiality, integrity, and availability of information, protecting against loss and disruption.

What is an example of a cybersecurity threat?

Answer: Cyberattacks such as malware, phishing, and ransomware.

Cybersecurity threats are malicious activities or events that can compromise the security of digital systems and data. Cyberattacks such as malware, phishing, and ransomware are prime examples, as they represent common methods used by attackers to gain unauthorized access, steal information, or disrupt operations. These threats exploit vulnerabilities to cause harm and require robust defenses.

What is phishing?

Answer: Sending fraudulent emails to steal personal information.

Phishing is a deceptive cyberattack where attackers send fraudulent communications, often disguised as legitimate entities, to trick recipients into revealing sensitive information. These emails or messages typically prompt users to click on malicious links or provide credentials, leading to data theft or system compromise. It exploits human trust and vulnerability to gain unauthorized access.

What does encryption do for cybersecurity?

Answer: Protects data by converting it into unreadable format to secure it from unauthorized access.

Encryption is a fundamental cybersecurity technique that transforms data into a coded, unreadable format, known as ciphertext. This process ensures that even if unauthorized individuals gain access to the data, they cannot understand or use it without the correct decryption key. It is crucial for protecting sensitive information both in transit and at rest, maintaining confidentiality.

Why is it important to regularly update software in cybersecurity?

Answer: To prevent cyberattacks by patching security flaws and vulnerabilities.

Regularly updating software is critical in cybersecurity because updates often include patches for newly discovered security flaws and vulnerabilities. Attackers frequently exploit these weaknesses to gain unauthorized access or deploy malware. By applying updates promptly, organizations and individuals can close these security gaps, significantly reducing their risk of cyberattacks and maintaining system integrity.

What is a firewall in cybersecurity?

Answer: A system that monitors and controls network traffic based on security rules.

A firewall acts as a security barrier between a trusted internal network and untrusted external networks, such as the internet. It monitors incoming and outgoing network traffic and enforces a set of predefined security rules to permit or block specific data packets. This prevents unauthorized access and protects the network from various cyber threats, serving as a first line of defense.

What is two-factor authentication?

Answer: Requiring two forms of verification, such as a password and a code sent to your phone.

Two-factor authentication (2FA) significantly enhances security by requiring users to provide two different types of credentials to verify their identity. This typically combines something the user knows (like a password) with something the user has (like a phone or a token) or something the user is (like a fingerprint). Even if one factor is compromised, the second factor prevents unauthorized access, making accounts much more secure.

What is a data breach?

Answer: An incident where unauthorized individuals access protected data.

A data breach occurs when sensitive, protected, or confidential data is accessed, viewed, stolen, or used by an unauthorized individual. These incidents can expose personal information, financial details, or intellectual property, leading to significant financial, reputational, and legal consequences for individuals and organizations. It represents a critical failure in data security measures, compromising confidentiality and integrity.

What is an intrusion detection system (IDS)?

Answer: A system that monitors network traffic for signs of unauthorized access or malicious activity.

An Intrusion Detection System (IDS) is a security technology designed to monitor network or system activities for malicious behavior or policy violations. It analyzes traffic patterns and system logs, alerting administrators to potential security incidents or attacks. While an IDS detects, it typically does not prevent the intrusion, but rather provides crucial information for rapid response and mitigation.