What is the main purpose of a business continuity plan (BCP)?

To maintain operations during a disruption

What is the primary objective of attack surface management?

To identify and reduce potential exposure points

What is the main objective of configuration management?

To maintain consistent security settings across systems

What is a key consideration when implementing patch management?

Patching frequency should align with compliance requirements

studbud

Cybersecurity Knowledge Check

12 termsStudBud Administration10 plays

Imported from external platform

Flashcards12 cardsFPractice quizPHost liveL

Questions 12

Answers

1
Which of the following is NOT considered a category of security controls?
Physical
Technical
Operational
Logical
2
Which phase in threat modelling involves identifying attack methods?
Documentation
Threat analysis
Threat deconstruction
Diagramming
3
What is the main purpose of a business continuity plan (BCP)?
To maintain operations during a disruption
To prevent unauthorized access
To ensure compliance with legal regulations
To manage IT change control
4
Which risk response strategy involves transferring the risk to another entity?
Avoidance
Mitigation
Acceptance
Transfer
5
What is the primary objective of attack surface management?
To increase network traffic
To identify and reduce potential exposure points
To monitor employee behaviour
To eliminate all vulnerabilities
6
Which of the following is an example of a preventive control?
Incident response plans
Firewalls
Audit logs
Disaster recovery plans
7
Which type of control includes policies, procedures, and risk assessments?
Managerial
Detective
Technical
Operational
8
What is the main objective of configuration management?
To enforce physical security measures
To maintain consistent security settings across systems
To ensure compliance with legal requirements
To eliminate all system vulnerabilities
9
Which of the following is NOT a key component of governance frameworks?
Procedures
Playbooks
Encryption algorithms
Policies
10
Which security framework is commonly used to ensure compliance with industry standards?
NIST 800 series
HIPAA
PCI DSS
GDPR
11
Which policy governs how changes are introduced in an IT environment?
Incident Response Policy
Change Management Policy
Acceptable Use Policy
Disaster Recovery Policy
12
What is a key consideration when implementing patch management?
Patching frequency should align with compliance requirements
Patches should only be applied annually
Only critical patches need to be applied
Patches should be deployed without testing

Cybersecurity Knowledge Check Flashcards | StudBud