CYB 202: Introduction to Cybersecurity and Strategy
Comprehensive Exam Answers
QUESTION 1(a)
Cybersecurity is the practice of protecting computers, networks, systems, software, and data from
unauthorized access, attacks, damage, or theft. Benefits:
1. Protection of Data
2. Prevention of Financial Loss
3. Ensures Business Continuity
4. Builds Trust and Reputation
QUESTION 1(b)
i. Cybercrimes Against Persons โ Example: Identity theft.
ii. Cybercrimes Against Property โ Example: Database theft.
iii. Cybercrimes Against Government โ Example: DDoS attack on a government website.
QUESTION 1(c)
1. Train employees.
2. Use email filters.
3. Enable MFA.
4. Verify links and attachments.
5. Report and remove phishing emails.
QUESTION 2(a)
Insider Attack โ Performed by authorized users inside an organization.
External Attack โ Launched by outsiders.
Unstructured Attack โ Conducted by inexperienced attackers using ready-made tools.
Structured Attack โ Conducted by skilled professionals.
QUESTION 2(b)
A DoS attack floods a server or network with excessive traffic, making it unavailable to legitimate
users.
QUESTION 2(c)
1. Strong Authentication
2. Multi-Factor Authentication
3. Data Encryption
4. Session Timeout
5. Secure Coding Practices
QUESTION 3(a)
Cyber laws are regulations governing the use of computers and the internet. They prevent
cybercrime, protect data, promote safe internet use, punish offenders, and protect national security.
Enforcement bodies in Nigeria include the Nigeria Police Force Cybercrime Unit, EFCC, DSS, and
NITDA.
QUESTION 3(b)
Identity theft occurs when someone steals another person's information and uses it without
permission. Prevention includes strong passwords, MFA, avoiding phishing, and monitoring
accounts.
QUESTION 3(c)
Malware is malicious software designed to damage systems or steal data. Examples: Virus and
Ransomware.
QUESTION 4(a)
A firewall is a security system that monitors and controls network traffic.
Characteristics:
1. Traffic Filtering
2. Access Control
QUESTION 4(b)
Encryption converts readable data into unreadable ciphertext. It protects confidentiality, privacy,
and online transactions.
