LESSON 2

Question 1

Which of the following best improves the effectiveness of a phishing awareness training program?

Accepted Answer

Simulating real-world phishing attacks and providing feedback

Question 2

Which factor primarily determines the retention period for sensitive financial data?

Accepted Answer

Legal and regulatory requirements

Question 3

Which of the following is the primary reason for classifying assets in an organization?

Accepted Answer

To apply appropriate security controls based on sensitivity

Question 4

Which security control provides both authentication and encryption for data in transit?

Accepted Answer

TLS (Transport Layer Security)

Question 5

Which of the following best describes data at rest?

Accepted Answer

Data stored on physical or digital media

Question 6

Which risk response strategy aims to reduce the probability or impact of a risk without eliminating it completely?

Accepted Answer

MITIGATION

Question 7

Which metric in a business continuity plan defines the maximum acceptable downtime before significant impact occurs?

Accepted Answer

Recovery Time Objective (RTO)

Question 8

At what stage of the data lifecycle is data anonymization most effective?

Accepted Answer

STORAGE

Question 9

Which of the following compliance frameworks is primarily focused on financial and accounting data protection?

Accepted Answer

SOX

Question 10

Which of the following is the best approach for securing cloud-based storage?

Accepted Answer

Enforcing strong access controls and encryption

Question 11

Which of the following best describes the concept of residual risk?

Accepted Answer

Risk that remains after applying mitigating controls

Question 12

Which threat modeling methodology focuses on identifying system vulnerabilities based on the attacker's perspective?

Accepted Answer

MITRE ATT&CK

Questions 12