Track 5 Final

Question 1

True or False: An effective Supply Chain Risk Management program enhances cybersecurity.

Accepted Answer

True

Question 2

Which of the following assessments attempts to exploit vulnerabilities to demonstrate security control effectiveness?

Accepted Answer

Penetration test

Question 3

True or False: A zero-day is a vulnerability discovered by a threat actor and is known by the developer or cyber.

Accepted Answer

False

Question 4

True or False: All entities that choose to use RMF for cyber compliance must implement all security controls.

Accepted Answer

False

Question 5

True or False: Entities should only establish cyber programs if it is mandated by law or compliance.

Accepted Answer

False

Question 6

Which part of the CIA triad ensures data cannot be modified by unauthorized parties?

Accepted Answer

Integrity

Question 7

Which of the following types of malware involves encrypting a system and demanding a ransom?

Accepted Answer

Ransomware

Question 8

True or False: The transportation industry is immune to attacks because threat actors only hack for financial gain.

Accepted Answer

False

Question 9

Which part of the CIA triad ensures systems/data can only be accessed by authorized users?

Accepted Answer

Confidentiality

Question 10

True or False: Insider risk programs must operate in a way that supports privacy laws and other regulations.

Accepted Answer

True

Question 11

Which of the following is a reputable source for threat intelligence?

Accepted Answer

ISACs

Question 12

Establishing a database of __________ ensures that organizations are purchasing equipment from vetted sources.

Accepted Answer

Trusted suppliers

Question 13

Which statement best describes insider risk?

Accepted Answer

A trusted party intentionally or unintentionally causes harm to the entity.

Question 14

Which part of the CIA triad ensures that systems/data can be accessed when they are needed?

Accepted Answer

Availability

Question 15

True or False: Critical assets must be protected to a greater degree than other assets.

Accepted Answer

True

Question 16

Which of the following describes an administrative control?

Accepted Answer

Policies, plans, and procedures

Question 17

The purpose of the Risk Management Framework (RMF) is to __________.

Accepted Answer

Comprehensively address, track, and reduce cyber risk

Questions 17