Question

question 1 (3 points)
what is a primary reason cybercriminals target healthcare organizations?
to access sensitive and exploitable data
a
b
to disrupt education systems
to steal medical supplies
c
d
to practice ethical hacking
question 2 (3 points)
in the ascension data breach, what caused the cybersecurity incident?
a software malfunction
a
b
a phishing email that led to the download of a malicious file
outdated medical equipment
c
d
hacking of a database by brute force

Explanation:

For Question 1: Healthcare organizations hold sensitive patient data (like medical records, personal information) which is valuable and can be exploited (sold on dark web, used for identity theft etc.). Option b is about education systems (not relevant to healthcare orgs as primary target), option c - stealing medical supplies is more of a physical theft (cybercriminals focus on digital data), option d - ethical hacking is legal and for security testing (opposite of cybercriminals' motives).
For Question 2: In many data breaches (including similar ones to Ascension), phishing is a common vector. A phishing email tricks users into downloading malicious files (which can give attackers access to systems). Option a - software malfunction is usually an accident (not a cybersecurity incident cause in the sense of a breach by external actors), option c - outdated medical equipment might have security vulnerabilities but phishing is a more direct cause for a data - breach incident as described, option d - brute - force hacking of a database is less common as a primary cause compared to phishing in such cases.

Answer:

Question 1: A. To access sensitive and exploitable data
Question 2: B. A phishing email that led to the download of a malicious file