(Done Jun 5) Chapter 180 - Cybersecurity Policies Quiz

Question 1

True or false: Risk can be completely eliminated.

Accepted Answer

False

Question 2

What is a key aspect of patch management?

Accepted Answer

Central management

Question 3

Which tool is NOT typically used for configuration management?

Accepted Answer

SIEM

Question 4

What is the difference between footprinting and passive discovery?

Accepted Answer

Footprinting is active; discovery is passive

Question 5

What is a corrective control example?

Accepted Answer

Backup system

Question 6

How does policy development support security operations?

Accepted Answer

By defining well-structured processes

Question 7

What is the main goal of risk management?

Accepted Answer

To manage risks

Question 8

True or false: Documentation is key in risk management.

Accepted Answer

True

Question 9

What is the focus of asset inventory?

Accepted Answer

Identifying assets

Question 10

What is a detective control example?

Accepted Answer

Logs

Question 11

What type of control is a web application firewall logging intrusions?

Accepted Answer

Detective

Question 12

What does a web application firewall do?

Accepted Answer

Records intrusions

Question 13

What is the purpose of threat modeling?

Accepted Answer

Identify threats

Question 14

Which team ensures work aligns with cybersecurity policies?

Accepted Answer

Audit team

Question 15

What objective does a security analyst’s investigation of a port scan fulfill?

Accepted Answer

Responsive

Question 16

True or false: Systems should not be monitored during maintenance windows.

Accepted Answer

False

Question 17

Which principle involves stopping high-risk activities?

Accepted Answer

Risk avoidance

Question 18

What does attack surface management help identify?

Accepted Answer

Weak spots

Question 19

What is the role of governance in cybersecurity?

Accepted Answer

To enforce rules

Question 20

What is the goal of security awareness training?

Accepted Answer

Educate users

Question 21

Which tool is used for configuration management?

Accepted Answer

Ansible

Question 22

True or false: Maintenance windows are not important.

Accepted Answer

False

Question 23

Which risk response is most appropriate when a risk is deemed tolerable?

Accepted Answer

Accept

Question 24

What is a preventive control example?

Accepted Answer

Firewall

Question 25

Which control category includes security awareness training?

Accepted Answer

Preventive

(Done Jun 5) Chapter 180 - Cybersecurity Policies Quiz

Questions 25

(Done Jun 5) Chapter 180 - Cybersecurity Policies Quiz

Questions 25