Which is the MOST EFFECTIVE way to limit administrative privileges?

Use role based access control with specified privileges

What can be described as an organization's 'attack surface' in this context?

Any cyber-based vulnerability in the organization

Which of these implementations fit a level 3 maturity level most?

Users must constantly authenticate themselves with MFA

What is another serious reason why one should update their systems with patches as soon as possible?

The patch will let malicious actors know of a vulnerability to exploit

Why are default settings for commercial applications and devices a vulnerability?

Attackers will try and brute force / exploit known default settings

What is the goal of the ASD Essential Eight?

To eliminate vulnerabilities in an organization's cyberspace

What does application control refer to in the ASD Essential Eight?

Limiting what code can be ran in the organization's computers

Why do macros pose a threat to organizations?

They can contain malware that steals information or compromises the user

Which is NOT a way to enforce application control in an organization?

Enforcing a standard operating system that all users must use

studbud

ASD Essential Eight

11 termsStudBud Administration

Quick learning activity for the ASD essential eight. Assumes some prior knowledge to cybersecurity!

Flashcards11 cardsFPractice quizPHost liveL

Questions 11

Answers

1
Which is the MOST EFFECTIVE way to limit administrative privileges?
Use role based access control with specified privileges
Train users to use administrative privileges judiciously
Use user account control (confirming to let a program use admin privileges)
Monitor uses of administrative privileges
2
Which of these MFA factor combinations is the strongest?
Face recognition and fingerprint recognition
Password and one-time password
ID card and one-time password
The name of your best friend, the primary school you went to
3
What can be described as an organization's 'attack surface' in this context?
Any cyber-based vulnerability in the organization
Any possible interaction that can be made with the organization
Their ranking of cybersecurity in comparison to other organizations
The different threats that are relevant to the organization
4
Which of these implementations fit a level 3 maturity level most?
Admins use a separate non-admin account for non-admin activities
Conduct a backup every 6 months
Users must constantly authenticate themselves with MFA
Patches are automatically applied if left for too long
5
What is another serious reason why one should update their systems with patches as soon as possible?
To prevent user fatigue in having to deal with updates
None of the above
The patch will let malicious actors know of a vulnerability to exploit
To prevent updates happening at an inconvenient time
6
Why are default settings for commercial applications and devices a vulnerability?
They have been thoroughly tested and designed to provide maximum security
Attackers will try and brute force / exploit known default settings
They will make handling the application less user friendly
Changing default settings will introduce more bugs and system instability
7
What is the goal of the ASD Essential Eight?
To track how capable malicious entities may be
For organizations to gain a certificate that they are secure
To increase the efficiency of how cyber-related systems are used
To eliminate vulnerabilities in an organization's cyberspace
8
What does application control refer to in the ASD Essential Eight?
Holding a standard environment that the members of the organization use
Limiting what code can be ran in the organization's computers
The utilization of command-line features
Installation of security tools such as firewalls and antiviruses
9
Why do macros pose a threat to organizations?
They can contain malware that steals information or compromises the user
The organization may not want to opt into giving Microsoft information
They pose an ethical concern due to the utilisation of automation
Macros can lock certain keys, compromising the user
10
Backing up data is good - but which of these factors should you consider when backing up data?
Backup time
All of the above
Storage space
Network resources
11
Which is NOT a way to enforce application control in an organization?
Preventing general users from running scripts on the command-line
Enforcing a standard operating system that all users must use
Blocking all executables in the downloads folder from running
Having a list of applications that users can use / are not allowed to use

ASD Essential Eight Flashcards | StudBud