What is the primary purpose of a Plan of Action in cybersecurity?

To outline steps for addressing security weaknesses

What is a key consideration when developing an action plan to secure legacy and embedded systems?

Implementing network segmentation to isolate vulnerable systems

When reporting risk mitigations, what is the most important detail to include?

Steps taken to reduce the risk and their effectiveness

Which KPI is most useful for measuring the effectiveness of cybersecurity reporting? Choose all that apply

Rate of vulnerability scan occurrence, Type of logs collected per day

What is the best practice for handling reported vulnerabilities?

Disclose to affected parties only

When reporting a risk score like in CVSS, what key factor is typically included?

Attack Vector, Scope, and Vulnerabilities

How should critical vulnerabilities be reported to executive leadership?

Provide a high-level summary with business impact

studbud

Reporting

8 termsStudBud Administration21 plays

Imported from external platform

Flashcards8 cardsFPractice quizPHost liveL

Questions 8

Answers

1
What is the primary purpose of a Plan of Action in cybersecurity?
To document employee cybersecurity training schedules
To track daily network performance metrics
To list approved software applications for employees
To outline steps for addressing security weaknesses
2
What is a key consideration when developing an action plan to secure legacy and embedded systems?
Disabling all system functions to prevent unauthorized access
Implementing network segmentation to isolate vulnerable systems
Relying solely on vendor patches for security updates
Replacing all legacy systems with modern alternatives immediately
3
When reporting risk mitigations, what is the most important detail to include?
A list of all vulnerabilities found, regardless of relevance
The names of the individuals responsible for the vulnerability
Steps taken to reduce the risk and their effectiveness
The total cost of all security tools used in the organization
4
Which KPI is most useful for measuring the effectiveness of cybersecurity reporting? Choose all that apply
Rate of vulnerability scan occurrence
Total number of employees in the security team
Number of software licenses owned
Type of logs collected per day
5
Which file format is best for presenting vulnerability reports to stakeholders?
JSON
PDF
CSV
TXT
6
What is the best practice for handling reported vulnerabilities?
Disclose to affected parties only
Only fix internal reports
Ignore low-severity issues
Publicly disclose immediately
7
When reporting a risk score like in CVSS, what key factor is typically included?
Patch notes from the vendor
Full exploit code
IP address of the affected system
Attack Vector, Scope, and Vulnerabilities
8
How should critical vulnerabilities be reported to executive leadership?
Share full technical details immediately
Delay reporting until a fix is implemented
Only report if an incident occurs
Provide a high-level summary with business impact

Reporting Flashcards | StudBud