(Done Jun 5) Chapter 180 - Cybersecurity Policies Quiz

Question 1

What type of control is a web application firewall logging intrusions?

Accepted Answer

Detective

Question 2

How does policy development support security operations?

Accepted Answer

By defining well-structured processes

Question 3

What is the goal of security awareness training?

Accepted Answer

Educate users

Question 4

What is the purpose of threat modeling?

Accepted Answer

Identify threats

Question 5

Which team ensures work aligns with cybersecurity policies?

Accepted Answer

Audit team

Question 6

What does attack surface management help identify?

Accepted Answer

Weak spots

Question 7

True or false: Maintenance windows are not important.

Accepted Answer

False

Question 8

Which tool is NOT typically used for configuration management?

Accepted Answer

SIEM

Question 9

What objective does a security analyst’s investigation of a port scan fulfill?

Accepted Answer

Responsive

Question 10

What is a preventive control example?

Accepted Answer

Firewall

Question 11

What does a web application firewall do?

Accepted Answer

Records intrusions

Question 12

What is the main goal of risk management?

Accepted Answer

To manage risks

Question 13

What is the role of governance in cybersecurity?

Accepted Answer

To enforce rules

Question 14

True or false: Documentation is key in risk management.

Accepted Answer

True

Question 15

Which risk response is most appropriate when a risk is deemed tolerable?

Accepted Answer

Accept

Question 16

Which control category includes security awareness training?

Accepted Answer

Preventive

Question 17

What is the focus of asset inventory?

Accepted Answer

Identifying assets

Question 18

What is a corrective control example?

Accepted Answer

Backup system

Question 19

What is the difference between footprinting and passive discovery?

Accepted Answer

Footprinting is active; discovery is passive

Question 20

Which tool is used for configuration management?

Accepted Answer

Ansible

Question 21

True or false: Systems should not be monitored during maintenance windows.

Accepted Answer

False

Question 22

True or false: Risk can be completely eliminated.

Accepted Answer

False

Question 23

What is a detective control example?

Accepted Answer

Logs

Question 24

What is a key aspect of patch management?

Accepted Answer

Central management

Question 25

Which principle involves stopping high-risk activities?

Accepted Answer

Risk avoidance

(Done Jun 5) Chapter 180 - Cybersecurity Policies Quiz

Questions 25

(Done Jun 5) Chapter 180 - Cybersecurity Policies Quiz

Questions 25