Cyber Security forData Solution — Learn free

Self-check

Questions 1–10 of 10

1. Which elements does a robust cybersecurity strategy for a data solution involve?
Question 1A. Encryption, regular audits, access controls, employee training and staying updated on emerging threatsB. Only a strong firewall at the network perimeterC. Only antivirus software on every laptopD. Only annual penetration testing by an external vendorE. Only encrypting passwords in the user table
2. What does the data encryption pointer for a data solution recommend?
Question 2A. Encrypting only data stored on backup tapesB. Employing end-to-end encryption to protect data during transmission and at rest, using strong algorithmsC. Encrypting data only when it leaves the countryD. Replacing encryption with password protectionE. Encrypting only the database administrator's account
3. How should access controls be implemented in a data solution?
Question 3A. Grant every user full administrator rights for convenienceB. Grant access based on seniority rather than roleC. Grant users only the permissions necessary for their roles, reviewing and updating privileges regularlyD. Remove all access controls once the system is in productionE. Allow shared accounts to simplify management
4. What human-related risk is employee cybersecurity training intended to minimise?
Question 4A. Hardware failureB. Software licence expiryC. Power outagesD. Phishing attacks and similar threatsE. Database schema drift
5. Where should data backups be stored to protect against compromise?
Question 5A. On the same server as the live databaseB. In the application's memory cacheC. On individual employees' laptopsD. In a shared email folderE. In a remote location
6. What does an incident response plan for a data solution require?
Question 6A. Development, regular testing, and clearly defined roles and responsibilities to minimise downtimeB. Only a phone number for the IT help deskC. A promise never to disclose incidentsD. Disabling all systems permanently after any incidentE. Waiting for regulators to instruct the organisation
7. Which measures are listed under network security for a data solution?
Question 7A. Printing network diagrams for the audit fileB. Firewalls, intrusion detection and prevention systems, and regular software updates and patchingC. Replacing the network with paper formsD. Sharing the Wi-Fi password with all visitorsE. Turning off logging to improve speed
8. Why is a vendor security assessment part of a data solution's cybersecurity strategy?
Question 8A. To negotiate lower prices from suppliersB. To replace internal security controls entirelyC. To assess and monitor the cybersecurity measures of third-party vendors handling your data and ensure they comply with security standardsD. To outsource all responsibility for breaches to vendorsE. To choose vendors based on their marketing
9. What does data lifecycle management contribute to cybersecurity for a data solution?
Question 9A. It increases the amount of data retained indefinitelyB. It removes the need for backupsC. It replaces access controlsD. Retention and destruction policies that minimise the risk of unauthorised access, defining how data is collected, processed, stored and disposed ofE. It converts all data to paper records
10. Which of the following is NOT one of the cybersecurity pointers listed for a data solution?
Question 10A. Regular auditsB. Security patchingC. Incident response planD. Data backupsE. Removing all user authentication to reduce friction