What does the Zero Trust approach to network security emphasize?

Continuous evaluation of access and granting only necessary permissions.

What are legacy applications in the context of cybersecurity?

Older or outdated software applications that pose security risks.

What is the purpose of the approval process in cybersecurity?

To review & approve changes, access, or security-related initiatives.

What is a maintenance window in cybersecurity?

A designated time frame for implementing necessary changes or updates.

What is the impact of downtime on system operations?

It results in the unavailability of a system or service.

What does ownership designation entail in cybersecurity?

Establishing clear accountability for assets or security-related tasks.

What is the primary purpose of monitoring/asset tracking?

Observing and tracking of the status, location, & usage of assets

Why is destruction employed in asset management?

To physically or electronically render an asset unusable or irreparable

What is sanitization in the context of disposal/decommissioning?

The process of removing sensitive or confidential data before disposal.

What is the purpose of documentation in an organization?

To describe a system, process, or procedure and serve as a reference.

Why are regular updates essential for policies and procedures?

To ensure alignment w/ changing business processes, tech, & regulations.

When might a service restart be necessary?

To update or resolve issues specific to a service or component.

What is the primary focus of gap analysis in cybersecurity?

Assessing an organization’s security posture and finding areas to improve.

What is the purpose of a Standard Operating Procedure (SOP) in cybersecurity?

To facilitate consistency and adherence to established security practices.

What is the purpose of allow lists and deny lists in cybersecurity?

To specify allowed or denied items such as applications or IP addresses.

studbud

Cybersecurity Unit 10 Review

16 termsStudBud Administration9 plays

Imported from external platform

Flashcards16 cardsFPractice quizPHost liveL

Questions 16

Answers

1
What does the Zero Trust approach to network security emphasize?
Continuous evaluation of access and granting only necessary permissions.
Trusting all users and devices within the network perimeter.
Providing broad access privileges to users once inside the network.
Implicit trust zones based on network perimeter defenses.
2
What are legacy applications in the context of cybersecurity?
Actions or behaviors restricted within a system or network.
Specific items such as applications or IP addresses allowed or denied.
Software, libraries, or components relied upon by another application.
Older or outdated software applications that pose security risks.
3
What is the purpose of the approval process in cybersecurity?
To involve diverse perspectives in security discussions.
To evaluate the potential consequences and effects of security incidents.
To designate responsibility and accountability for specific assets.
To review & approve changes, access, or security-related initiatives.
4
What is a maintenance window in cybersecurity?
Documented guidelines outlining step-by-step procedures for specific tasks
A designated time frame for reviewing and approving security changes.
A predetermined set of procedures for executing planned system maintenance.
A designated time frame for implementing necessary changes or updates.
5
What is the impact of downtime on system operations?
It minimizes service interruptions and downtime.
It requires strategies like redundancy and failover.
It restricts access privileges and user behavior.
It results in the unavailability of a system or service.
6
Which type of document visually represents the structure and flow of a system?
Version control
Diagrams
Code documentation
Policies and procedures
7
What does ownership designation entail in cybersecurity?
Involving diverse perspectives in security discussions.
Outlining step-by-step procedures for specific security-related tasks.
Evaluating the potential consequences and effects of security incidents.
Establishing clear accountability for assets or security-related tasks.
8
What is the primary purpose of monitoring/asset tracking?
Identifying needs for asset acquisition
Establishing and documenting ownership of assets within an organization
Observing and tracking of the status, location, & usage of assets
Negotiating contracts with vendors
9
Why is destruction employed in asset management?
To obtain official confirmation that an asset has been properly disposed of
To physically or electronically render an asset unusable or irreparable
To establish and document ownership of assets within an organization
To track financial aspects of assets
10
What is sanitization in the context of disposal/decommissioning?
Categorizing assets based on their importance
The process of removing sensitive or confidential data before disposal.
Obtaining official confirmation that an asset has been properly disposed of
Physically or electronically rendering an asset unusable or irreparable
11
What is the purpose of documentation in an organization?
To visually represent the structure and flow of a system.
To manage changes to documents, code, or any other information.
To describe a system, process, or procedure and serve as a reference.
To provide guidelines or rules outlining organizational operations.
12
Why are regular updates essential for policies and procedures?
To manage changes to documents, code, or other collections of information.
To ensure alignment w/ changing business processes, tech, & regulations.
To describe how something works and its components.
To visually represent the structure and flow of a system.
13
When might a service restart be necessary?
To update or resolve issues specific to a service or component.
To apply changes or address issues without system-wide disruption.
To restrict certain actions or behaviors within a system or network.
To minimize service interruptions and downtime.
14
What is the primary focus of gap analysis in cybersecurity?
Monitoring user authentication logs for anomalies.
Comparing current network traffic with desired network traffic.
Assessing an organization’s security posture and finding areas to improve.
Evaluating the performance of intrusion detection systems.
15
What is the purpose of a Standard Operating Procedure (SOP) in cybersecurity?
To revert to a previous configuration in the event of issues or failures.
To facilitate consistency and adherence to established security practices.
To designate responsibility and accountability for specific assets.
To provide a safety net for security changes or implementations.
16
What is the purpose of allow lists and deny lists in cybersecurity?
To minimize service interruptions and downtime.
To restrict certain actions or behaviors within a system or network.
To manage software, libraries, or components relied on by other apps.
To specify allowed or denied items such as applications or IP addresses.

Cybersecurity Unit 10 Review Flashcards | StudBud