Course outline
Module 1
Module 1: Introduction to Cybercrime
Introduction to Cybercrime
Knowledge check
Q1. What is cybercrime?
- A. A crime committed using a computer ✓
- B. A crime committed against a computer
- C. A crime committed by a hacker
- D. A crime committed online
Why: Cybercrime refers to criminal activities that are committed using a computer or the internet, often involving unauthorized access, data theft, or fraud.
Q2. Which of the following is an example of cybercrime?
- A. Theft of a car
- B. Hacking into a bank's database ✓
- C. Robbery in a shopping mall
- D. Arson
Why: Hacking into a bank's database is an example of cybercrime as it involves unauthorized access to computer systems for illegal purposes.
Q3. What is the primary goal of cybercriminals?
- A. To gain public recognition
- B. To cause harm or gain financial benefit ✓
- C. To protect computer systems
- D. To spread awareness about cybersecurity
Why: The primary goal of cybercriminals is typically to cause harm, steal information, or gain financial benefit through illegal activities.
Q4. Which of the following is a common type of cybercrime?
- A. Speeding
- B. Phishing ✓
- C. Littering
- D. Burglary
Why: Phishing is a common type of cybercrime where attackers attempt to steal sensitive information, such as usernames and passwords, by pretending to be a trustworthy entity.
Q5. What is the role of cybersecurity?
- A. To commit cybercrime
- B. To prevent and detect cybercrime ✓
- C. To increase the number of cybercrimes
- D. To spread malware
Why: The role of cybersecurity is to prevent, detect, and respond to cybercrimes in order to protect individuals, organizations, and governments from digital threats.
Module 2
Module 2: Types of Cyber Threats
Types of Cyber Threats
Knowledge check
Q1. Which of the following is a common type of cyber threat that involves stealing sensitive information such as passwords and credit card details?
- A. Phishing ✓
- B. Malware
- C. Ransomware
- D. Spoofing
Why: Phishing is a common cyber threat that involves tricking individuals into revealing sensitive information through deceptive emails or websites.
Q2. What is the primary goal of ransomware?
- A. To steal data
- B. To encrypt files and demand payment for decryption ✓
- C. To spread malware across networks
- D. To damage computer hardware
Why: Ransomware primarily aims to encrypt files on a victim's system and demand payment in exchange for the decryption key.
Q3. Which of the following is a type of malware that disguises itself as legitimate software?
- A. Spyware
- B. Adware
- C. Trojan ✓
- D. Virus
Why: A Trojan is a type of malware that disguises itself as legitimate software to trick users into installing it.
Q4. What is the main purpose of a DDoS attack?
- A. To steal data
- B. To disrupt the normal functioning of a network or website ✓
- C. To install backdoors in systems
- D. To monitor user activity
Why: A DDoS attack aims to overwhelm a network or website with traffic, thereby disrupting its normal functioning.
Q5. Which of the following is an example of social engineering?
- A. Installing a firewall
- B. Phishing emails ✓
- C. Updating software
- D. Using strong passwords
Why: Phishing emails are an example of social engineering, where attackers manipulate individuals into revealing sensitive information.
Module 3
Module 3: Digital Forensics Basics
Digital Forensics Basics
Knowledge check
Q1. What is the primary goal of digital forensics?
- A. To delete digital evidence
- B. To collect, preserve, and analyze digital evidence ✓
- C. To create new digital evidence
- D. To hide digital evidence
Why: Digital forensics focuses on the collection, preservation, and analysis of digital evidence to support legal or investigative purposes.
Q2. Which of the following is a key principle in digital forensics?
- A. Altering evidence for clarity
- B. Maintaining the chain of custody ✓
- C. Ignoring data from unsecured devices
- D. Using unverified tools for analysis
Why: Maintaining the chain of custody ensures that evidence is handled properly and remains admissible in court.
Q3. What does the term "forensic imaging" refer to?
- A. Deleting data permanently
- B. Creating an exact copy of a digital storage device ✓
- C. Encrypting data for security
- D. Formatting a storage device
Why: Forensic imaging involves creating an exact copy of a digital storage device to preserve evidence without altering the original.
Q4. Which of the following is a common tool used in digital forensics?
- A. Microsoft Word
- B. Encase ✓
- C. Photoshop
- D. Excel
Why: Encase is a widely used digital forensics tool for collecting and analyzing digital evidence.
Q5. What is the purpose of data recovery in digital forensics?
- A. To delete lost data
- B. To retrieve data that has been deleted or lost ✓
- C. To hide data from investigators
- D. To alter data for analysis
Why: Data recovery in digital forensics is used to retrieve data that has been deleted or lost, which may be crucial for an investigation.
Module 4
Module 4: Cybersecurity Laws and Regulations
Cybersecurity Laws and Regulations
Module 5
Module 5: Online Privacy and Data Protection
Online Privacy and Data Protection
Knowledge check
Q1. What is the primary purpose of data protection laws?
- A. To increase data collection by companies
- B. To safeguard personal information and prevent misuse ✓
- C. To allow free sharing of information online
- D. To reduce internet usage
Why: Data protection laws aim to ensure that personal information is handled responsibly and securely, protecting individuals from unauthorized access or misuse.
Q2. Which of the following is a common method used to protect online privacy?
- A. Ignoring security updates
- B. Using strong, unique passwords ✓
- C. Sharing personal information freely
- D. Using unsecured Wi-Fi networks
Why: Using strong, unique passwords is a fundamental practice in protecting online privacy and preventing unauthorized access to accounts.
Q3. What does GDPR stand for?
- A. General Data Protection Regulation ✓
- B. Global Data Privacy Rule
- C. General Data Rights Act
- D. Global Data Regulation Act
Why: GDPR stands for General Data Protection Regulation, which is a regulation in the European Union designed to protect the privacy and personal data of individuals.
Q4. Which of the following is NOT a way to enhance online privacy?
- A. Using a virtual private network (VPN)
- B. Avoiding public Wi-Fi networks
- C. Using default browser settings without customization ✓
- D. Enabling two-factor authentication
Why: Using default browser settings without customization may leave your online activities less secure, as default settings often prioritize convenience over privacy.
Q5. What is a data breach?
- A. A situation where data is encrypted for security
- B. A situation where personal data is lost or stolen ✓
- C. A method to protect data from unauthorized access
- D. A legal requirement to share data with the government
Why: A data breach occurs when sensitive, protected, or confidential data is accessed, stolen, or used by an individual or organization without authorization.
Module 6
Module 6: Cybercrime Investigation Techniques
Cybercrime Investigation Techniques
Knowledge check
Q1. What is the primary goal of a cybercrime investigation?
- A. To identify the perpetrator for legal action
- B. To collect and preserve digital evidence in a forensically sound manner ✓
- C. To prevent future cybercrimes
- D. To increase public awareness about cyber threats
Why: The primary goal is to ensure that digital evidence is collected and preserved properly to be used in legal proceedings.
Q2. Which of the following is a common tool used in cybercrime investigations?
- A. Microsoft Word
- B. Wireshark ✓
- C. Photoshop
- D. Excel
Why: Wireshark is a network protocol analyzer commonly used in cybercrime investigations to capture and analyze network traffic.
Q3. What does the term "chain of custody" refer to in the context of cybercrime investigations?
- A. The sequence of events that led to the cybercrime
- B. The process of transferring evidence between individuals and ensuring its integrity ✓
- D. The legal process of prosecuting cybercriminals
Why: Chain of custody refers to the documented record of the handling and transfer of evidence to ensure its integrity and admissibility in court.
Q4. Which of the following is a key principle in digital forensics?
- A. Data should be modified to fit the investigation needs
- B. Evidence should be preserved in its original state ✓
- C. All data should be deleted after the investigation
- D. Only the most relevant data should be collected
Why: Preserving evidence in its original state is a fundamental principle in digital forensics to maintain its integrity and reliability.
Q5. What is the purpose of a memory dump in cybercrime investigations?
- A. To delete all data from a system
- B. To capture the current state of a system's memory for analysis ✓
- C. To encrypt sensitive information
- D. To create a backup of the entire hard drive
Why: A memory dump captures the current state of a system's memory, which can be analyzed to find evidence of malicious activity or system behavior.
Module 7
Module 7: Preventing Cyber Attacks
Preventing Cyber Attacks
Knowledge check
Q1. What is the primary goal of implementing firewalls in a network?
- A. To increase internet speed
- B. To prevent unauthorized access ✓
- C. To monitor employee activity
- D. To reduce hardware costs
Why: Firewalls are designed to block unauthorized access while permitting outward communication, thus enhancing network security.
Q2. Which of the following is a common method used to prevent phishing attacks?
- A. Using strong passwords
- B. Ignoring suspicious emails
- C. Training employees to recognize phishing attempts ✓
- D. Disabling email services
Why: Training employees to identify and report phishing attempts is a crucial step in preventing such attacks.
Q3. What is the main purpose of multi-factor authentication (MFA)?
- A. To increase the number of login attempts
- B. To make passwords unnecessary
- C. To add an extra layer of security beyond just a password ✓
- D. To reduce the need for security software
Why: MFA adds an additional layer of security by requiring more than one form of verification to access an account.
Q4. Which of the following is a best practice for securing personal devices against malware?
- A. Using public Wi-Fi networks frequently
- B. Installing software from unknown sources
- C. Keeping the operating system and apps updated ✓
- D. Disabling antivirus software
Why: Keeping software updated ensures that known vulnerabilities are patched, reducing the risk of malware infections.
Q5. What is the role of an intrusion detection system (IDS)?
- A. To prevent all cyber attacks
- B. To monitor network traffic for suspicious activity ✓
- C. To replace firewalls
- D. To encrypt data transmissions
Why: An IDS monitors network traffic and alerts administrators to potential security threats or breaches.