In cybersecurity, what best defines resilience?

Operating and recovering during threats

What best defines an attack surface?

The total sum of vulnerabilities in an organization

The McCumber Cube emphasizes which of the following?

Security across technology, policies, and human factors

What is the primary role of a CISO in a cybersecurity defense framework?

Leading cybersecurity strategy and governance

Which of the following best illustrates the “Zero Trust” principle?

Never trust, always verify—even inside the network

What is the key difference between education, training, and awareness in cyber defense?

Education is why, training is how, awareness is what

studbud

SEELL CyberLeadership

10 termsStudBud Administration7 plays

quiz for session 1 -3 Use in Session 4

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
In cybersecurity, what best defines resilience?
Applies only to IT systems
Having cyber insurance
Operating and recovering during threats
Eliminating all cyber risks
2
What does the M.O.M. model stand for in explaining attacker behavior?
Malware, Overload, Manipulation
Motive, Opportunity, Method
Metrics, Optimization, Monitoring
Monitoring, Operations, Management
3
Which of these is a social attack surface?
USB device
Untrained employee
Server misconfiguration
Wi-Fi router
4
What best defines an attack surface?
The number of firewalls in a system
The total sum of vulnerabilities in an organization
The malware used to initiate an attack
The total sum of vulnerabilities in an organization
5
Which of the following is NOT part of the CIA Triad in cybersecurity?
Accountability
Confidentiality
Availability
Integrity
6
The McCumber Cube emphasizes which of the following?
Restricting data access using VPNs only
Just hardware-based security controls
Security across technology, policies, and human factors
Blockchain integration in information security
7
What is the primary role of a CISO in a cybersecurity defense framework?
Leading cybersecurity strategy and governance
Coding encryption algorithms
Providing end-user helpdesk support
Writing firewall rules
8
Which of the following best illustrates the “Zero Trust” principle?
Avoid using multi-factor authentication
Never trust, always verify—even inside the network
Allow access based on user roles without verification
Trust all internal devices but not external ones
9
What is the key difference between education, training, and awareness in cyber defense?
Education is hands-on; awareness is conceptual; training is passive
Education is only for technical staff
Training and awareness are the same
Education is why, training is how, awareness is what
10
Which of the following is an example of an attack vector?
A phishing email
Password complexity policy
Your organization's firewall
An unpatched system

SEELL CyberLeadership Flashcards | StudBud