CyberSecurity Associate. Week 2

Logging and tracking user actions to determine who did what is part of:

Intrusion detection systems (IDS) are what type of control?

A server with unpatched software that attackers exploit represents a:

Data backups and disaster-recovery plans fall under which control category?

Ransomware encrypts critical files, making them inaccessible. The primary impact is on:

A vulnerability management failure at Equifax involved a missing:

Choosing to live with a minor website-downtime risk without action is:

After login, a user is denied access to a report due to insufficient privileges. Which concept is enforced?

Qualitative risk assessment differs from quantitative in that it uses:

Step-by-step instructions to onboard an employee describe a:

Firewalls and antivirus are examples of which purpose-based control?

Which measure helps ensure confidentiality?

An attacker modifies audit logs to hide activity. Which CIA principle is most impacted?

In the AAA framework, “verifying a user’s identity” refers to:

High-level statements approved by executives that set security direction are:

Implementing firewalls and regular updates to reduce cyberattack likelihood is:

Which of the following is not one of the three core principles of the CIA Triad?

Continuous monitoring of alerts and quarterly reviews corresponds to which risk phase?

Which of the following is not one of the four fundamental risk treatment strategies?

Under GDPR and HIPAA, handling personal data is mandated by:

ISO/IEC 27001 is an example of a:

Best-practice recommendations that are optional but useful are called:

Brainstorming potential problems before rollout is part of:

Which principle prevents a user from denying they performed a transaction?

The layered approach combining multiple controls is called:

A hospital employee emails a patient’s record to the wrong address, exposing it. Which principle is violated?

Locks, barriers, and security guards are examples of:

Recording digital signatures to prove transaction authenticity supports:

Which mechanism-based control includes policies, procedures, and guidelines?

Which risk management strategy involves shifting risk to a third party?