How would you approach assessing the risk of a newly discovered zero-day vulnerability in critical infrastructure?

detailed threat analysis and immediate compensating controls

What is the primary goal of risk management?

To identify and prioritize risks for mitigation

What would you prioritize when securing a system that handles sensitive customer data?

Applying encryption and access controls to prevent breaches

If a vulnerability has a low chance of exploitation and a high likelihood of impact, how will you prioritize mitigation?

Prioritize mitigation due to the potential impact

studbud

KUMAR-477-Quiz1

10 termsStudBud Administration70 plays

Imported from external platform

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
How would you approach assessing the risk of a newly discovered zero-day vulnerability in critical infrastructure?
Wait for a patch before analyzing
Notify stakeholders for risk analysis
Assume it will not be exploited
detailed threat analysis and immediate compensating controls
2
What is the primary goal of risk management?
To eliminate all risks
To identify and prioritize risks for mitigation
To prevent all cybersecurity attacks
To ensure compliance with regulations
3
When you buy Insurance, you
Mitigate Risk
Transfer Risk
Accept Risk
Avoid Risk
4
What would you prioritize when securing a system that handles sensitive customer data?
Educating end-users about system architecture
Applying encryption and access controls to prevent breaches
Maximizing performance while adding minimal controls
Building multiple layers of backups for disaster recovery only
5
What attack is primarily used to crack WPA/WPA2 passwords?
Man-in-the-Middle Attack
Brute Force Attack
ARP Spoofing
Dictionary Attack
6
FedRAMP is primarily designed for which type of environment?
Healthcare organizations
Enterprise IT systems
Financial systems
Cloud service providers
7
What is the primary focus of NIST 800-30?
Control Implementation
Risk Monitoring
Comprehensive Risk Analysis
Strategic Alignment
8
Which tool is commonly used for capturing WiFi packets for cracking WPA/WPA2 passwords?
Metasploit
Wireshark
Nmap
Aircrack-ng
9
If a vulnerability has a low chance of exploitation and a high likelihood of impact, how will you prioritize mitigation?
Treat it as a low-priority risk and monitor it
Transfer the risk to a third party
Prioritize mitigation due to the potential impact
Ignore it since exploitation is unlikely
10
What are the three main components of risk?
Asset, compliance, policy
Impact, resource, strategy
Likelihood, control, monitoring
Threat, vulnerability, impact

KUMAR-477-Quiz1 Flashcards | StudBud