Cybersecurity und Datenschutz: Online-Quiz für Wirtschaftsinformatik-Studierende

Question 1

Which GDPR principle mandates organizations to collect and process only essential personal data for a specific purpose?

Accepted Answer

Data minimization

Answer

Data breach notification within 72 hours

Answer

Right to erasure

Answer

Mandatory consent for all data processing activities

Question 2

Which of the following actions can help protect against cyberattacks?

Accepted Answer

Installing antivirus software

Answer

Sharing sensitive information with unknown individuals

Answer

Ignoring software updates

Answer

Turning off firewalls

Question 3

Which type of cyberattack encrypts data and demands payment for decryption?

Accepted Answer

Ransomware

Answer

Phishing

Answer

Malware

Answer

Man-in-the-middle attack

Question 4

Which social engineering technique aims to deceive users into disclosing sensitive information?

Accepted Answer

Phishing

Answer

Malware

Answer

Brute force attack

Answer

Man-in-the-middle attack

Question 5

What is the primary objective of penetration testing?

Accepted Answer

To pinpoint vulnerabilities in a computer system

Answer

To develop and implement security measures

Answer

To detect and respond to security breaches

Answer

To monitor security incidents

Question 6

What is encryption's role in data protection?

Accepted Answer

To secure sensitive data from unauthorized access

Answer

To detect and prevent data breaches

Answer

To monitor and control access to data

Answer

To store and manage data reliably

Question 7

What is the purpose of a data protection impact assessment (DPIA)?

Accepted Answer

To assess privacy risks associated with processing personal data

Answer

To develop and implement data protection measures

Answer

To monitor and report on data protection compliance

Answer

To respond to data protection breaches

Question 8

Which of the following is a cyberattack that involves unauthorized access to computer systems and data?

Accepted Answer

Hacking

Answer

Phishing

Answer

Malware

Answer

DDoS

Question 9

What is the primary purpose of a firewall in cybersecurity?

Accepted Answer

To prevent unauthorized access to a network

Answer

To detect and remove viruses

Answer

To encrypt data

Answer

To back up data

Question 10

Which of the following is NOT a key principle of data protection?

Accepted Answer

Durability

Answer

Confidentiality

Answer

Integrity

Answer

Availability

Question 11

What is the initial step in the process of identifying and mitigating security risks known as?

Accepted Answer

Risk assessment

Answer

Vulnerability scanning

Answer

Penetration testing

Answer

Security auditing

Question 12

What is the primary purpose of data encryption in cybersecurity?

Accepted Answer

To protect sensitive data from unauthorized access

Answer

To speed up data transfer

Answer

To ensure data integrity

Answer

To back up data

Question 13

What is the purpose of a data breach notification law?

Accepted Answer

To require organizations to notify individuals affected by a data breach

Answer

To impose fines on organizations that fail to comply with data protection regulations

Answer

To provide guidance on how to respond to data breaches

Answer

To prevent data breaches from occurring

Question 14

What does the acronym GDPR stand for?

Accepted Answer

General Data Protection Regulation

Answer

Global Data Protection Regulation

Answer

Germanic Data Protection Reform

Answer

Governmental Data Protection Regulation

Question 15

What is the term for unauthorized access to a computer or network?

Accepted Answer

Hacking

Answer

Malware

Answer

Phishing

Answer

Spam

Question 16

Which of the following is a best practice for password security?

Accepted Answer

Create complex and unique passwords

Answer

Use the same password for all accounts

Answer

Share passwords with trusted individuals

Answer

Never change passwords

Question 17

What is the purpose of encryption in data protection?

Accepted Answer

To make data unreadable without a key

Answer

To delete data securely

Answer

To back up data in case of loss

Answer

To prevent data breaches

Question 18

Which of the following is a benefit of cloud computing in terms of data protection?

Accepted Answer

Enhanced data security

Answer

Reduced data storage costs

Answer

Improved data accessibility

Answer

Increased compliance burden

Question 19

Welche Lehren lassen sich aus einer Fallstudie über eine Datenverletzung ziehen, bei der vertrauliche Kundendaten offengelegt wurden?

Accepted Answer

Mitarbeiterschulungen sind entscheidend, um Datenverletzungen zu verhindern.

Answer

Moderne Verschlüsselung ist immer absolut sicher.

Answer

Cybersecurity-Software allein kann umfassenden Schutz bieten.

Question 20

What is the primary goal of data privacy regulations?

Accepted Answer

To protect the privacy and confidentiality of personal data

Answer

To facilitate the sharing of data for research and innovation

Answer

To promote economic growth by encouraging data-driven industries

Answer

To prevent data breaches and cyberattacks

Question 21

Which of the following is a symmetric encryption algorithm?

Accepted Answer

AES

Answer

RSA

Answer

ECC

Answer

SHA-256

Question 22

What is the main purpose of multi-factor authentication (MFA)?

Accepted Answer

To enhance account security by requiring multiple forms of verification

Answer

To simplify the user login process by reducing the number of credentials required

Answer

To eliminate the need for traditional password-based authentication

Answer

To protect against brute force attacks

Question 23

Which of the following is a common type of cyberattack that involves sending malicious emails?

Accepted Answer

Phishing

Answer

Malware

Answer

Spam

Answer

Ransomware

Question 24

In cybersecurity and data protection, which ethical principle holds the highest priority?

Accepted Answer

Privacy

Answer

Profitability

Answer

Ease of Use

Question 25

Which of the following is NOT a type of cyber attack?

Accepted Answer

Spamming

Answer

Phishing

Answer

Malware

Answer

DDoS

Question 26

What is the primary purpose of a firewall?

Accepted Answer

To block unauthorized access to a network

Answer

To detect and remove malware

Answer

To encrypt data

Answer

To back up data

Question 27

What is the main objective of the General Data Protection Regulation (GDPR)?

Accepted Answer

To protect the personal data of individuals within the European Union

Answer

To regulate the use of artificial intelligence

Answer

To prevent cyber attacks

Answer

To promote data sharing

Question 28

What is the main difference between a virus and a worm?

Accepted Answer

A virus infects files, while a worm infects networks

Answer

A virus can replicate itself, while a worm cannot

Answer

A worm is always malicious, while a virus can be benign

Answer

There is no difference between a virus and a worm

Question 29

What is the purpose of conducting a penetration test?

Accepted Answer

To identify vulnerabilities in a computer system

Answer

To remove malware from a computer system

Answer

To encrypt data on a computer system

Answer

To back up data on a computer system

Question 30

Which of the following is NOT a potential benefit of cloud computing?

Accepted Answer

Improved security

Answer

Reduced costs

Answer

Increased flexibility

Answer

Simplified maintenance

Question 31

Assess the advantages and drawbacks of intrusion detection systems (IDS) in preventing cyberattacks.

Accepted Answer

IDS are only effective against known attacks and cannot detect zero-day attacks.

Accepted Answer

IDS require ongoing maintenance and expertise to configure and operate effectively.

Answer

IDS can detect and block all types of cyberattacks.

Answer

IDS provide comprehensive protection against cyberattacks and eliminate the need for additional security measures.

Question 32

Which of the following is a core objective of cybersecurity?

Accepted Answer

Preserving the confidentiality, integrity, and availability of sensitive information and systems

Answer

Maximizing business profitability

Answer

Enhancing customer engagement

Question 33

What is the primary goal of data protection regulations such as the GDPR?

Accepted Answer

Safeguarding individuals' personal information from misuse and unauthorized access

Answer

Restricting businesses from collecting data

Answer

Stimulating innovation in the technology industry

Question 34

What is the primary role of cryptography in cybersecurity?

Accepted Answer

Encrypting data to protect it from unauthorized access and modification

Answer

Providing digital signatures

Answer

Mitigating DDoS attacks

Question 35

What defines a firewall?

Accepted Answer

A network security device that monitors and controls incoming and outgoing traffic

Answer

A type of malicious software

Answer

A data encryption algorithm

Question 36

Which of the following is a recommended practice for creating secure passwords?

Accepted Answer

Using a combination of uppercase and lowercase letters, numbers, and symbols

Answer

Choosing common words from the dictionary

Answer

Reusing the same password for multiple accounts

Question 37

What is the underlying concept of "Zero Trust" in cybersecurity?

Accepted Answer

Never implicitly trust any entity; always verify and authorize access

Answer

Trust but verify

Answer

Trust all entities at all times

Answer

Verify but trust

Question 38

Which of the following is a central aspect of data governance?

Accepted Answer

Establishing policies and procedures for data management

Answer

Implementing security measures

Answer

Developing new software applications

Answer

Acquiring hardware and software

Question 39

What is the purpose of a security audit?

Accepted Answer

To systematically evaluate and identify security vulnerabilities and risks

Answer

To continuously monitor network traffic

Answer

To design and implement new security systems

Answer

To train employees on security best practices

Question 40

Which of the following is NOT a common threat to cybersecurity?

Accepted Answer

Natural disaster

Answer

Hacking

Answer

Phishing

Answer

Malware

Question 41

What is the primary purpose of encryption?

Accepted Answer

To secure data from unauthorized access or modification

Answer

To increase data transmission speed

Answer

To enhance data storage capacity

Answer

To facilitate data sharing

Question 42

Which of the following is considered a best practice for password management?

Accepted Answer

Create strong, unique passwords for each account

Answer

Reuse the same password across multiple accounts

Answer

Store passwords in a plain text file

Answer

Share passwords with colleagues

Question 43

What is the key distinction between cybersecurity and data protection?

Accepted Answer

Cybersecurity focuses on protecting systems from unauthorized access, while data protection focuses on safeguarding personal data

Answer

Cybersecurity and data protection are interchangeable terms

Answer

Data protection is a subset of cybersecurity

Answer

Cybersecurity is only concerned with protecting networks

Question 44

Which legal framework is primarily responsible for data protection in the European Union?

Accepted Answer

General Data Protection Regulation (GDPR)

Answer

Health Insurance Portability and Accountability Act (HIPAA)

Answer

California Consumer Privacy Act (CCPA)

Answer

Patriot Act

Question 45

What is the primary function of a firewall?

Accepted Answer

To control incoming and outgoing network traffic based on defined security rules

Answer

To provide secure remote access to a network

Answer

To monitor network activity for suspicious behavior

Answer

To scan incoming emails for malicious content

Question 46

What is the primary responsibility of a penetration tester?

Accepted Answer

To assess the security of a computer system by simulating a cyberattack

Answer

To train staff on cybersecurity best practices

Answer

To monitor networks for suspicious activity

Answer

To develop and implement cybersecurity policies

Question 47

Which of the following is a recommended practice for data backup?

Accepted Answer

Regularly create backups and store them in a separate location

Answer

Back up data only when it is convenient

Answer

Only back up data that is deemed important

Answer

Store backups on the same computer as the original data

Question 48

Why is incident response planning crucial for organizations?

Accepted Answer

It enables organizations to prepare for and respond to cybersecurity incidents in a timely and effective manner

Answer

Incident response plans should only be developed after an incident has occurred

Answer

Incident response planning is not necessary for organizations of all sizes

Answer

Incident response planning is only beneficial for organizations with large IT budgets

Question 49

Which of the following is NOT a common type of cyber attack?

Accepted Answer

Physical assault

Answer

Malware

Answer

Brute force attack

Answer

Phishing

Question 50

What is the primary purpose of encryption?

Accepted Answer

To protect data from unauthorized access

Answer

To permanently delete data

Answer

To improve data transmission speed

Answer

To organize data for easy retrieval

Question 51

Which of the following is considered a best practice for data privacy?

Accepted Answer

Minimizing data collection

Answer

Sharing data with third parties without consent

Answer

Storing data in multiple insecure locations

Answer

Using weak passwords

Question 52

What is the term for the unauthorized access, use, or disclosure of sensitive personal data?

Accepted Answer

Data breach

Answer

Cyberbullying

Answer

Data theft

Answer

Identity theft

Question 53

Which of the following is a key element of a cybersecurity policy?

Accepted Answer

Incident response plan

Answer

Marketing campaign

Answer

Employee handbook

Answer

Financial statement

Question 54

What is the purpose of penetration testing?

Accepted Answer

To identify security vulnerabilities in a system

Answer

To monitor network traffic

Answer

To install security updates

Answer

To train security personnel

Question 55

Which of the following is a legal framework that protects personal data in the European Union?

Accepted Answer

General Data Protection Regulation (GDPR)

Answer

Sarbanes-Oxley Act

Answer

Patriot Act

Answer

Health Insurance Portability and Accountability Act (HIPAA)

Question 56

What is the difference between data encryption and data anonymization?

Accepted Answer

Encryption makes data unreadable, while anonymization removes personally identifiable information.

Answer

Anonymization is more cost-effective than encryption.

Answer

Encryption is more secure than anonymization.

Question 57

What role does a firewall play in cybersecurity?

Accepted Answer

To block unauthorized access to a network

Answer

To detect and remove malware

Answer

To back up data in the event of a breach

Answer

To encrypt data transmissions

Question 58

What is the purpose of data encryption?

Accepted Answer

To protect data from unauthorized access

Answer

To compress data files

Answer

To delete duplicate data

Answer

To improve data transmission speed

Question 59

Which of the following is a best practice for creating strong passwords?

Accepted Answer

Use a mix of uppercase and lowercase letters, numbers, and symbols

Answer

Never change your password

Answer

Use short, easy-to-remember passwords

Question 60

What is the primary goal of the General Data Protection Regulation (GDPR)?

Accepted Answer

To protect the personal data of EU citizens

Answer

To increase government surveillance

Answer

To promote economic growth

Answer

To facilitate data sharing

Question 61

Which of the following is a key component of a cybersecurity risk assessment?

Accepted Answer

Identifying potential vulnerabilities

Answer

Purchasing cybersecurity insurance

Answer

Installing antivirus software

Answer

Hiring a cybersecurity consultant

Question 62

What is the difference between a firewall and an intrusion detection system (IDS)?

Accepted Answer

A firewall blocks unauthorized access, while an IDS detects suspicious activity

Answer

A firewall is only used to protect networks, while an IDS can also protect individual computers

Answer

A firewall is software-based, while an IDS is hardware-based

Question 63

What is the role of artificial intelligence (AI) in cybersecurity?

Accepted Answer

To automate threat detection and response

Answer

To create new vulnerabilities in systems

Answer

AI is not used in cybersecurity

Answer

To replace human cybersecurity professionals

Question 64

Which of the following is NOT a best practice for protecting personal data?

Accepted Answer

Sharing passwords with coworkers

Answer

Keeping software up to date

Answer

Being cautious about clicking on links in emails

Answer

Using strong passwords