Three common controls used to protect the availability of information are:

a. Redundancy, backups and access controls.

b. Encryption, file permissions and access controls.

c. Access controls, logging and digital signatures.

d. Hashes, logging and backups.

2. Select all that apply. Governance has several goals, including:

a. Providing strategic direction.

b. Ensuring that objectives are achieved.

c. Verifying that organizational resources are being used appropriately.

e. Ascertaining whether risk is being managed properly.

a. Providing strategic direction.

b. Ensuring that objectives are achieved.

c. Verifying that organizational resources are being used appropriately.

d. Directing and monitoring security activities.

e. Ascertaining whether risk is being managed properly.

Which of the following is the best definition for cybersecurity?

d. Protecting information assets by addressing threats to information that is processed, stored or transported by interworked information systems

a. The process by which an organization manages cybersecurity risk to an acceptable level

b. The protection of information from unauthorized access or disclosure

c. The protection of paper documents, digital and intellectual property, and verbal or visual communications

d. Protecting information assets by addressing threats to information that is processed, stored or transported by interworked information systems

Select three. The chain of custody contains information regarding:

b. Who had access to the evidence, in chronological order.

d. Proof that the analysis is based on copies identical to the original evidence.

e. The procedures followed in working with the evidence.

a. Disaster recovery objectives, resources and personnel.

b. Who had access to the evidence, in chronological order.

c. Labor, union and privacy regulations.

d. Proof that the analysis is based on copies identical to the original evidence.

e. The procedures followed in working with the evidence.

Select all that apply. A business impact analysis (BIA) should identify:

b. The estimated probability of the identified threats actually occurring.

c. The efficiency and effectiveness of existing risk mitigation controls.

d. A list of potential vulnerabilities, dangers and/or threats.

a. The circumstances under which a disaster should be declared.

b. The estimated probability of the identified threats actually occurring.

c. The efficiency and effectiveness of existing risk mitigation controls.

d. A list of potential vulnerabilities, dangers and/or threats.

e. Which types of data backups (full, incremental and differential) will be used.

____________________ is defined as “a model for enabling convenient, on-demand network access to a shared pool of configurable resources (e.g., networks, servers, storage, applications and services) that can be rapidly provisioned and released with minimal management or service provider interaction.”

a. Software as a Service (SaaS)

d. Platform as a Service (PaaS)

Select all that apply. Which of the following statements about advanced persistent threats (APTs) are true?

a. APTs typically originate from sources such as organized crime groups, activists or governments.

b. APTs use obfuscation techniques that help them remain undiscovered for months or even years.

c. APTs are often long-term, multi-phase projects with a focus on reconnaissance.

a. APTs typically originate from sources such as organized crime groups, activists or governments.

b. APTs use obfuscation techniques that help them remain undiscovered for months or even years.

c. APTs are often long-term, multi-phase projects with a focus on reconnaissance.

d. The APT attack cycle begins with target penetration and collection of sensitive information.

e. Although they are often associated with APTs, intelligence agencies are rarely the perpetrators of APT attacks.

Smart devices, BYOD strategies and freely available applications and services are all examples of:

a. The reorientation of technologies and services designed around the individual end user.

b. The primacy of external threats to business enterprises in today’s threat landscape.

c. The stubborn persistence of traditional communication methods.

d. The application layer’s susceptibility to APTs and zero-day exploits.

Which three elements of the current threat landscape have provided increased levels of access and connectivity, and therefore increased opportunities for cybercrime?

d. Cloud computing, social media and mobile computing

a. Text messaging, Bluetooth technology and SIM cards

b. Web applications, botnets and primary malware

c. Financial gains, intellectual property and politics

d. Cloud computing, social media and mobile computing

CyberSecurity Fundamentals (Section 1,5 And 6)

Approved & Edited by ProProfs Editorial Team

At ProProfs Quizzes, our dedicated in-house team of experts takes pride in their work. With a sharp eye for detail, they meticulously review each quiz. This ensures that every quiz, taken by over 100 million users, meets our standards of accuracy, clarity, and engagement.

Learn about Our Editorial Process

| Written by Louis.dejaeger.m

Louis.dejaeger.m

Community Contributor

Quizzes Created: 1 | Total Attempts: 2,088

Questions: 15 | Attempts: 2,089 | Updated: Mar 22, 2023

Questions

Settings

Create your own Quiz

Cybersecurity Fundamentals (Section 1,5 And 6) - Quiz

Cyber security is the practice of ensuring the integrity, confidentiality, and availability of information. It helps prevent dangerous accidents like hard drive failures or power outages, and from attacks by adversaries. If you are planning to get the certificate from Nexus on cyber security the quiz below will help with your revision of section 1,5 and 6.

Questions and Answers

CyberSecurity Fundamentals (Section 1,5 And 6)

Three common controls used to protect the availability of information are:

2. Select all that apply. Governance has several goals, including:

Choose three. According to the NIST framework, which of the following are considered key functions necessary for the protection of digital assets?

Which of the following is the best definition for cybersecurity?

Which of the following cybersecurity roles is charged with the duty of managing incidents and remediation?

Which element of an incident response plan involves obtaining and preserving evidence?

Select three. The chain of custody contains information regarding:

. NIST defines a(n) as a “violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices.”

Select all that apply. A business impact analysis (BIA) should identify:

Select all that apply. Which of the following statements about advanced persistent threats (APTs) are true?

Smart devices, BYOD strategies and freely available applications and services are all examples of:

Choose three. Which types of risk are typically associated with mobile devices?

Which three elements of the current threat landscape have provided increased levels of access and connectivity, and therefore increased opportunities for cybercrime?