CCST Cybersecurity Security Policy Fundamentals

1. Which of the following is a key element of password policy?

Minimum length and complexity requirements

Passwords must be written on sticky notes

All passwords should be the same

Passwords never need to be changed

2. Which framework provides guidelines for information security management systems (ISMS)?

ISO/IEC 27001

NIST Cybersecurity Framework

Both A and B

Neither A nor B

Submit

4. Which of the following best describes the principle of confidentiality?

Ensuring unauthorized parties cannot access sensitive information

Guaranteeing data is always available

Verifying user identities

Creating multiple data copies

5. True or False: A disaster recovery plan focuses specifically on restoring IT systems after a disaster.

True

False

6. What is the purpose of security awareness training in an organization?

To educate employees about security risks and best practices

To replace all security technology

To eliminate the need for policies

To reduce IT department staffing

7. Which security principle ensures that authorized users can access resources when needed?

Availability

Confidentiality

Integrity

Authentication

Submit

9. What does GDPR primarily regulate?

Personal data protection and privacy in the European Union

Payment card industry standards

Healthcare information security

Financial institution auditing

10. True or False: Multi-factor authentication (MFA) requires users to provide multiple forms of verification.

True

False

11. What is the primary purpose of a security policy in an organization?

To establish rules, procedures, and guidelines for protecting information assets

To purchase the latest security technology

To eliminate all cybersecurity risks

To assign IT staff responsibilities only

12. What is the purpose of a business continuity plan?

To ensure critical operations continue during and after disruptions

To increase IT staff salaries

To eliminate backup systems

To reduce cybersecurity budgets

Submit

14. Which phase of incident response involves stopping the attack and limiting damage?

Containment

Detection

Recovery

Prevention

15. True or False: Data classification policies help determine appropriate protection levels based on sensitivity.

True

False

16. What is the primary goal of an incident response policy?

To detect, contain, and recover from security incidents quickly

To prevent all security incidents permanently

To punish employees after security breaches

To eliminate the need for security monitoring

17. Which compliance framework is commonly used in healthcare organizations?

HIPAA

GDPR

PCI-DSS

SOX

Submit

19. What does the principle of least privilege mean in access control?

Users receive only the minimum permissions needed for their job role

All employees must have administrative access

Permissions are granted based on seniority

Only executives can approve access requests

20. Which of the following is NOT a typical component of an information security policy?

Acceptable use guidelines

Password management standards

Vendor marketing strategies

Data classification levels

CCST Cybersecurity Security Policy Fundamentals Quiz

1. Which of the following is a key element of password policy?

2.

What first name or nickname would you like us to use?

2. Which framework provides guidelines for information security management systems (ISMS)?

3. Access control lists (ACLs) are used to ____ network traffic based on defined rules.

4. Which of the following best describes the principle of confidentiality?

5. True or False: A disaster recovery plan focuses specifically on restoring IT systems after a disaster.

6. What is the purpose of security awareness training in an organization?

7. Which security principle ensures that authorized users can access resources when needed?

8. A ____ is a documented set of security objectives and requirements for an organization.

9. What does GDPR primarily regulate?

10. True or False: Multi-factor authentication (MFA) requires users to provide multiple forms of verification.

11. What is the primary purpose of a security policy in an organization?

12. What is the purpose of a business continuity plan?

13. A ____ policy defines what employees can and cannot do with company IT resources.

14. Which phase of incident response involves stopping the attack and limiting damage?

15. True or False: Data classification policies help determine appropriate protection levels based on sensitivity.

16. What is the primary goal of an incident response policy?

17. Which compliance framework is commonly used in healthcare organizations?

18. Role-based access control (RBAC) assigns permissions based on ____.

19. What does the principle of least privilege mean in access control?

20. Which of the following is NOT a typical component of an information security policy?