Which are characteristics of DoD IT Systems?

Task-specific, specialized, and mission-critical

What does C5ISR stand for?

Command, Control, Coms, Computers, Cyber, Intel, Surveillance, and Recon

Which best describes the strategic function of a cybersecurity framework within an organization?

Provides guidance for aligning security practices with organizational risk

Which is an example of data handling?

Applying classification markings to sensitive documents

What is the purpose of the Risk Management Framework?

Compliance, Improve security posture, Continuous monitoring, Risk management

What is the role of a compliance manager?

To ensure that security frameworks and standards are followed

Which of the following best explains the concept of defense in depth?

Implementing multiple layers of security controls to reduce risk

Which of the following best describes the principle of least privilege?

Only the minimum access needed to perform duties is granted

What does NIST SP 800-18 provide guidance for?

Creating System Security Plans (SSPs)

System Security Plans (SSPs) are developed primarily to support which of the following?

Authorization to Operate (ATO) decisions

What does NIST stand for?

National Institute of Standards and Technology

studbud

Cybersecurity Essentials

26 termsStudBud Administration14 plays

Test your knowledge on key concepts, tools, and threats in the world of cybersecurity with this engaging quiz.

Flashcards26 cardsFPractice quizPHost liveL

Questions 26

Answers

1
Which of the following is not a typical use case for AES?
Protecting classified data in transit
Encrypting files on disk
Hashing passwords
Securing VPN tunnels
2
What does SSP stand for?
Secure Software Protocol
Systematic Security Process
System Security Plan
Standard Security Policy
3
Which are characteristics of DoD IT Systems?
General-purpose, low-cost, and highly customizable
Task-specific, specialized, and mission-critical
Fully autonomous, unclassified, and vendor-managed
Open-source, user-configured, and public-facing
4
What does C5ISR stand for?
Cyber, Control, Computing, Comms, Intelligence, Surveillance, and Response
Command, Comms, Computers, Cryptography, Cyber, Intel, Strategy, and Recon
Control, Coordination, Computing, Comms, Cyber, Intel, Signals, Recovery
Command, Control, Coms, Computers, Cyber, Intel, Surveillance, and Recon
5
In cybersecurity, what does SOC stand for?
Systems of Compliance
Secure Online Channel
Security Operations Center
Standard Organizational Control
6
Did you learn something today?
No
Yes
7
Which best describes the strategic function of a cybersecurity framework within an organization?
Enforces regulatory compliance through automated enforcement tools
Provides guidance for aligning security practices with organizational risk
Establishes a uniform set of tactics to eliminate all vulnerabilities
Defines proprietary protocols for securing national infrastructure
8
How many steps are in the Risk Management Framework (NIST 800-37)?
7
5
8
6
9
Which is an example of data handling?
Configuring a firewall to block unauthorized IP addresses
Installing CCTV cameras in a secure facility
Using MFA to log into a secure workstation
Applying classification markings to sensitive documents
10
Which security domain is more secure?
SIPRnet
NIPRnet
11
What is the purpose of the Risk Management Framework?
Compliance
Improve security posture
Continuous monitoring
Risk management
12
What is the role of a compliance manager?
Audit financial statements for regulatory filing
To ensure that security frameworks and standards are followed
Design and implement firewalls across enterprise systems
Write all system source code for secure applications
13
Which of the following are examples of cybersecurity framework developers?
OWASP and CompTIA
EC-Council and ISC²
IETF and IEEE
ISO and PCI
14
Which is an example of access control
Biometrics
ID Badges
Data encryption
System backups
15
True or False: Anyone can access a JWICS network
True
False
16
Which framework is widely used in cybersecurity?
SABSA
ITIL
NIST
TOGAF
17
Which of the following best explains the concept of defense in depth?
Replacing firewalls and antivirus tools with user training
Implementing multiple layers of security controls to reduce risk
Outsourcing all security operations to a third-party provider
Using AI to predict and neutralize all cyber threats in real time
18
Which of the following best describes the principle of least privilege?
Users are given access to all system resources unless explicitly denied
Only administrators can access data classified as Top Secret
Only the minimum access needed to perform duties is granted
All users share the same access level to ensure operational consistency
19
What does NIST SP 800-18 provide guidance for?
Creating System Security Plans (SSPs)
Developing contingency plans for information systems
Establishing incident response procedures storage
Assessing risk in industrial control systems
20
What network is authorized for transmitting Top Secret data?
NIPRnet
JWICS
CENTRIXS
SIPRnet
21
Which is an example of physical data security?
Multi-Factor Authentication
TEMPEST
Network segmentation
Firewalls
22
True or false: SSPs detail user roles, access permissions and data flows?
False
True
23
Which NIST standard establishes the Risk Management Framework (RMF)?
NIST SP 800-171
NIST SP 800-161
NIST SP 800-53
NIST SP 800-37
24
System Security Plans (SSPs) are developed primarily to support which of the following?
Security training compliance reports
Vulnerability scanning tools
Authorization to Operate (ATO) decisions
Disaster recovery procedures
25
What does NIST stand for?
National Institution for Standards and Technologies
National Institute of Standards and Technology
Network Information Systems and Telecommunications
National Institute for Strategic Technology
26
Which of the following are examples of authentication methods?
Security clearance
VLAN tag
MFA
Password

Cybersecurity Essentials Flashcards | StudBud