Question

unit 1: self-assessment
answer the following self-assessment questions. do not research the answers; this is just an evaluation of what you know about the subject of cybersecurity.

• what is cybersecurity? why do we need it?
• who does cybersecurity affect?
• what are some careers that relate to cybersecurity?
• what is spam email?
• what is phishing?
• what is social engineering and what is its purpose?
• what is malware?
• how can you ensure your browsing experience is secure? (include web browser security features, as well as security considerations related to the website you are visiting.)
• what are the main components in a network?
• how do you keep your computer safe from malicious content, such as unsafe files and harmful processes?

Answer:

These are self - assessment questions about cybersecurity. Since no specific question is selected for answering, here are general guidelines for answering such questions:

For "What is cybersecurity? Why do we need it?"

• Cybersecurity is the practice of protecting systems, networks, and programs from digital attacks. These attacks are usually aimed at accessing, changing, or destroying sensitive information; extorting money from users; or interrupting normal business processes.
• We need it because in the digital age, almost all aspects of our lives (personal, business, government) rely on digital systems. Cyber attacks can lead to financial losses, loss of personal data (like credit card numbers, social security numbers), disruption of critical infrastructure (like power grids, healthcare systems), and damage to a company's or a country's reputation.

For "Who does cybersecurity affect?"

• Individuals: Cybersecurity affects individuals as they use digital devices for personal use (like online banking, social media). A lack of cybersecurity can lead to identity theft, loss of personal data, and financial fraud.
• Businesses: Businesses of all sizes are affected. Small businesses can be targeted for their customer data or financial information, and large corporations can face data breaches that affect millions of customers, leading to financial losses and reputational damage.
• Governments: Governments rely on digital systems for national security, public services, and communication. Cyber attacks on government systems can compromise national security, disrupt public services (like tax collection, social security systems), and lead to the theft of state secrets.
• Critical Infrastructure Providers: Entities that provide critical infrastructure (like power plants, water treatment facilities, transportation systems) are affected. A cyber attack on these systems can lead to widespread disruptions, endangering public safety.

For "What are some careers that relate to cybersecurity?"

• Cybersecurity Analyst: Monitors an organization's networks for security breaches and investigates incidents when they occur.
• Ethical Hacker (Penetration Tester): Tests an organization's systems and networks by simulating cyber attacks to find vulnerabilities before malicious hackers can exploit them.
• Security Engineer: Designs and implements security systems to protect an organization's computer networks and systems.
• Chief Information Security Officer (CISO): Oversees the overall security strategy of an organization, including cybersecurity policies, procedures, and incident response plans.
• Security Architect: Designs the overall security architecture of an organization's IT systems, including network security, application security, and data security.

For "What is spam email?"

Spam email is unsolicited, bulk email that is usually sent for commercial purposes (like promoting a product or service), but can also be used for malicious purposes (like phishing or spreading malware). These emails are often sent to a large number of recipients without their consent and can clutter inboxes, carry malicious links or attachments, and be a nuisance to users.

For "What is phishing?"

Phishing is a type of cyber attack where an attacker masquerades as a trustworthy entity (like a bank, a government agency, or a well - known company) in an electronic communication (usually an email) to trick the recipient into revealing sensitive information such as usernames, passwords, credit card numbers, or other personal data. The attacker may also try to get the recipient to download malware by clicking on a link or opening an attachment in the phishing email.

For "What is social engineering and what is its purpose?"

• Social engineering is the art of manipulating people into revealing confidential or personal information that can be used for fraudulent purposes. It relies on human interaction and often involves tricking people into breaking normal security procedures.
• The purpose of social engineering is to gain unauthorized access to systems, data, or physical locations. For example, an attacker may pose as a new employee to get an existing employee to give them access to a restricted area or to share their login credentials.

For "What is malware?"

Malware is short for "malicious software". It is any software that is designed to harm or exploit any programmable device, service, or network. Types of malware include viruses (self - replicating programs that attach to other programs), worms (self - replicating programs that spread across networks without needing a host file), Trojans (programs that disguise themselves as legitimate software but have malicious functions), ransomware (software that encrypts a user's data and demands a ransom for its release), and spyware (software that secretly collects information about a user's activities).

For "How can you ensure your browsing experience is secure? (Include web browser security features, as well as security considerations related to the website you are visiting.)"

• Web Browser Security Features:
• Use a modern, updated web browser (like Google Chrome, Mozilla Firefox, or Safari). These browsers have built - in security features such as phishing and malware protection. For example, Chrome will warn you if you are about to visit a known phishing site or a site that has been reported for malware.
• Keep your browser updated. Browser updates often include security patches to fix vulnerabilities.
• Use the browser's privacy and security settings. For example, you can enable features like "Do Not Track" (although its effectiveness is debated), and manage cookie settings to limit the amount of data websites can collect about you.
• Use a secure connection (HTTPS). Most browsers will show a padlock icon in the address bar when you are on an HTTPS - enabled website. HTTPS encrypts the data transmitted between your browser and the website, protecting it from eavesdropping.
• Website - Related Security Considerations:
• Only visit websites that you trust. Avoid clicking on links from unknown or suspicious sources (like spam emails or pop - up ads).
• Check the website's URL. Make sure it is spelled correctly and does not have any unusual characters or misspellings (which could be a sign of a phishing site). For example, a fake bank website might have a URL like "www.bankofamerica - secure.com" instead of the real "www.bankofamerica.com".
• Be cautious when downloading files from websites. Only download files from trusted sources, and scan any downloaded files with an antivirus program before opening them.

For "What are the main components in a network?"

• Hardware Components:
• Routers: Devices that forward data packets between computer networks. They determine the best path for data to travel from one network to another.
• Switches: Connect devices (like computers, printers, servers) within a local area network (LAN). They use MAC addresses to forward data packets to the correct device on the network.
• Hubs: Older devices that connect multiple devices in a network. However, unlike switches, hubs broadcast data to all connected devices, which can lead to network congestion.
• Servers: Computers that provide services to other devices on the network. For example, a file server stores and manages files for network users, a web server hosts websites, and a mail server manages email communication.
• Clients: Devices (like computers, smartphones, tablets) that request services from servers.
• Network Interface Cards (NICs): Hardware components that allow a device to connect to a network. They can be wired (like Ethernet cards) or wireless (like Wi - Fi adapters).
• Software Components:
• Network Operating Systems (NOS): Operating systems that are designed to support networked devices. Examples include Windows Server, Linux (in its server - oriented distributions), and macOS Server. These operating systems provide services like user authentication, file sharing, and printer sharing across the network.
• Network Protocols: Sets of rules that govern how data is transmitted over a network. Examples include TCP/IP (Transmission Control Protocol/Internet Protocol), which is the foundation of the Internet, and HTTP (Hypertext Transfer Protocol) for web communication.

For "How do you keep your computer safe from malicious content, such as unsafe files and harmful processes?"

• Use Antivirus and Anti - Malware Software: Install a reputable antivirus and anti - malware program (like Norton, McAfee, or Malwarebytes) and keep it updated. These programs can detect and remove viruses, worms, Trojans, and other types of malware.
• Keep Your Operating System and Software Updated: Operating system and software updates often include security patches that fix vulnerabilities that could be exploited by malicious software. Enable automatic updates whenever possible.
• Be Cautious with Downloads and Email Attachments: Only download files from trusted sources. Do not open email attachments from unknown senders, as they may contain malware. Even if the sender seems familiar, be cautious if the attachment is unexpected.
• Use a Firewall: A firewall (either the built - in firewall in your operating system or a dedicated hardware firewall) can block unauthorized access to your computer from the network. It can also prevent malicious software on your computer from communicating with external servers.
• Practice Safe Browsing Habits: As mentioned earlier, avoid visiting suspicious websites, and use HTTPS - enabled websites when possible. Also, be careful with clicking on links in emails, social media, or other online platforms, as they may lead to malicious websites.