What is the purpose of documentation in an organization?

To describe a system, process, or procedure and serve as a reference.

Why are regular updates essential for policies and procedures?

To ensure alignment w/ changing business processes, tech, & regulations.

What is the primary focus of gap analysis in cybersecurity?

Assessing an organization’s security posture and finding areas to improve.

What is the purpose of a Standard Operating Procedure (SOP) in cybersecurity?

To facilitate consistency and adherence to established security practices.

What is the impact of downtime on system operations?

It results in the unavailability of a system or service.

What is the purpose of allow lists and deny lists in cybersecurity?

To specify allowed or denied items such as applications or IP addresses.

What does the Zero Trust approach to network security emphasize?

Continuous evaluation of access and granting only necessary permissions.

What is sanitization in the context of disposal/decommissioning?

The process of removing sensitive or confidential data before disposal.

What is a maintenance window in cybersecurity?

A designated time frame for implementing necessary changes or updates.

What are legacy applications in the context of cybersecurity?

Older or outdated software applications that pose security risks.

What is the purpose of the approval process in cybersecurity?

To review & approve changes, access, or security-related initiatives.

What is the primary purpose of monitoring/asset tracking?

Observing and tracking of the status, location, & usage of assets

What does ownership designation entail in cybersecurity?

Establishing clear accountability for assets or security-related tasks.

Why is destruction employed in asset management?

To physically or electronically render an asset unusable or irreparable

When might a service restart be necessary?

To update or resolve issues specific to a service or component.

studbud

Cybersecurity Unit 10 Review

16 termsStudBud Administration9 plays

Imported from external platform

Flashcards16 cardsFPractice quizPHost liveL

Questions 16

Answers

1
Which type of document visually represents the structure and flow of a system?
Version control
Diagrams
Policies and procedures
Code documentation
2
What is the purpose of documentation in an organization?
To describe a system, process, or procedure and serve as a reference.
To visually represent the structure and flow of a system.
To manage changes to documents, code, or any other information.
To provide guidelines or rules outlining organizational operations.
3
Why are regular updates essential for policies and procedures?
To manage changes to documents, code, or other collections of information.
To ensure alignment w/ changing business processes, tech, & regulations.
To visually represent the structure and flow of a system.
To describe how something works and its components.
4
What is the primary focus of gap analysis in cybersecurity?
Assessing an organization’s security posture and finding areas to improve.
Monitoring user authentication logs for anomalies.
Comparing current network traffic with desired network traffic.
Evaluating the performance of intrusion detection systems.
5
What is the purpose of a Standard Operating Procedure (SOP) in cybersecurity?
To facilitate consistency and adherence to established security practices.
To designate responsibility and accountability for specific assets.
To provide a safety net for security changes or implementations.
To revert to a previous configuration in the event of issues or failures.
6
What is the impact of downtime on system operations?
It requires strategies like redundancy and failover.
It results in the unavailability of a system or service.
It minimizes service interruptions and downtime.
It restricts access privileges and user behavior.
7
What is the purpose of allow lists and deny lists in cybersecurity?
To minimize service interruptions and downtime.
To specify allowed or denied items such as applications or IP addresses.
To restrict certain actions or behaviors within a system or network.
To manage software, libraries, or components relied on by other apps.
8
What does the Zero Trust approach to network security emphasize?
Implicit trust zones based on network perimeter defenses.
Continuous evaluation of access and granting only necessary permissions.
Trusting all users and devices within the network perimeter.
Providing broad access privileges to users once inside the network.
9
What is sanitization in the context of disposal/decommissioning?
Categorizing assets based on their importance
Obtaining official confirmation that an asset has been properly disposed of
The process of removing sensitive or confidential data before disposal.
Physically or electronically rendering an asset unusable or irreparable
10
What is a maintenance window in cybersecurity?
A designated time frame for reviewing and approving security changes.
A predetermined set of procedures for executing planned system maintenance.
Documented guidelines outlining step-by-step procedures for specific tasks
A designated time frame for implementing necessary changes or updates.
11
What are legacy applications in the context of cybersecurity?
Older or outdated software applications that pose security risks.
Specific items such as applications or IP addresses allowed or denied.
Software, libraries, or components relied upon by another application.
Actions or behaviors restricted within a system or network.
12
What is the purpose of the approval process in cybersecurity?
To review & approve changes, access, or security-related initiatives.
To designate responsibility and accountability for specific assets.
To involve diverse perspectives in security discussions.
To evaluate the potential consequences and effects of security incidents.
13
What is the primary purpose of monitoring/asset tracking?
Establishing and documenting ownership of assets within an organization
Observing and tracking of the status, location, & usage of assets
Identifying needs for asset acquisition
Negotiating contracts with vendors
14
What does ownership designation entail in cybersecurity?
Involving diverse perspectives in security discussions.
Evaluating the potential consequences and effects of security incidents.
Establishing clear accountability for assets or security-related tasks.
Outlining step-by-step procedures for specific security-related tasks.
15
Why is destruction employed in asset management?
To physically or electronically render an asset unusable or irreparable
To track financial aspects of assets
To establish and document ownership of assets within an organization
To obtain official confirmation that an asset has been properly disposed of
16
When might a service restart be necessary?
To minimize service interruptions and downtime.
To apply changes or address issues without system-wide disruption.
To restrict certain actions or behaviors within a system or network.
To update or resolve issues specific to a service or component.

Cybersecurity Unit 10 Review Flashcards | StudBud