What is the purpose of a security framework?

To provide a structured approach to security and risk management

HIPAA is concerned with:

Patient health information protection

What does the acronym C.I.A in the CIA Triad stand for?

Confidentiality, Integrity, Availability

Adhering to policies and regulations

The Center for Internet Security (CIS) provides:

A set of security controls to protect systems and networks

What does NIST stand for?

National Institute of Standards and Technology

FedRAMP is associated with:

Standardized security for cloud services

What does the security lifecycle involve?

Planning, building, testing, and improving security

ISO is a global standard that focuses on:

Safety, reliability, and quality of systems and services

What does FERC-NERC regulate?

U.S. and North American power grid security

The primary purpose of security frameworks is to:

Protect sensitive data and align with business goals

studbud

Security Frameworks and controls

19 termsStudBud Administration7 plays

Imported from external platform

Flashcards19 cardsFPractice quizPHost liveL

Questions 19

Answers

1
What is the purpose of a security framework?
To increase company profits
To eliminate all cyber threats completely
To replace compliance programs
To provide a structured approach to security and risk management
2
HIPAA is concerned with:
Financial audits
Cloud data encryption
Password management
Patient health information protection
3
What does the acronym C.I.A in the CIA Triad stand for?
Confidentiality, Integrity, Availability
Communication, Integrity, Authentication
Control, Identity, Access
Compliance, Information, Audit
4
Compliance means:
Reporting every user login
Ignoring outdated standards
Removing old systems
Adhering to policies and regulations
5
The Center for Internet Security (CIS) provides:
Default firewall settings
USB protection software
Antivirus programs only
A set of security controls to protect systems and networks
6
What does NIST stand for?
National Internal Security Team
National Information Security Taskforce
National Institute of Standards and Technology
Network Intrusion Standards Team
7
HITRUST is a framework that helps institutions:
Comply with HIPAA
Train ethical hackers
Meet PCI-DSS requirements
Automate system backups
8
The GDPR protects:
Banking passwords worldwide
All U.S. citizens’ data
Privacy rights of EU residents
Email addresses only
9
What are security controls primarily designed to do?
Reduce specific risks
Increase audit scores
Monitor employee behavior
Replace security frameworks
10
Confidentiality, integrity, and availability are the three core principles of the CIA Triad.
True
False
11
Which of the following is not a core component of a security framework?
Monitoring results
Implementing weak encryption
Setting guidelines
Documenting security goals
12
FedRAMP is associated with:
Security for healthcare records
Industrial control systems
Payment processing regulations
Standardized security for cloud services
13
NIST helps organizations manage risk through voluntary compliance frameworks.
True
False
14
What does the security lifecycle involve?
Encrypting only sensitive data
Marketing new security software
Planning, building, testing, and improving security
Just building systems
15
ISO is a global standard that focuses on:
Mobile device compatibility
Social engineering prevention
Only healthcare data protection
Safety, reliability, and quality of systems and services
16
HIPAA regulations are focused on protecting financial transaction data.
False
True
17
What does FERC-NERC regulate?
Internet banking
Mobile application safety
Airline cybersecurity
U.S. and North American power grid security
18
The main goal of a security framework is to increase internet speed.
False
True
19
The primary purpose of security frameworks is to:
Protect sensitive data and align with business goals
Remove outdated software
Prevent physical attacks only
Lower hardware costs

Security Frameworks and controls Flashcards | StudBud