stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cybersecurity Day 1 Flashcards | StudBud
Explore
/
Cybersecurity Day 1
Cybersecurity Day 1
24 terms
·
StudBud Administration
·
12 plays
Questions related to Cybersecurity foundations and GRC
Flashcards
24 cards
F
Practice quiz
P
Host live
L
Questions
24
Answers
1
Which team defends systems against attackers?
Red Team
Compliance Team
Purple Team
Blue Team
2
Which malware locks your data and demands payment?
Rootkit
Ransomware
Adware
Spyware
3
Which is NOT a function of the NIST CSF?
Protect
Control
Respond
Identify
4
Which of the following is a framework for GRC?
NIST
OWASP
SIEM
CVSS
5
What is the purpose of GRC in cybersecurity?
Align security with business goals
Develop apps
Enforce penalties
Only prevent malware
6
What makes a Rootkit particularly dangerous compared to other malware?
It only works during boot
It targets mobile apps
It requires user permission to run
It hides itself and grants administrative access
7
What does the "C" in CIA Triad stand for?
Confidentiality
Compliance
Control
Certification
8
Which policy restricts how systems should be used?
Backup Policy
DRP
Logging Policy
Acceptable Use Policy
9
What is one key difference between worms and viruses?
There is no real difference
Worms self-replicate without user action; viruses need a host
Worms require email delivery; viruses do not
Viruses target hardware; worms target software
10
What is the purpose of a risk assessment?
To train staff
To evaluate potential impact of threats
To detect malware
To score CVEs
11
What does NIST stand for?
National Institute of Standards and Technology
National Internet Safety Taskforce
Network International Security Team
None of the above
12
Which scenario best illustrates a lack of availability in the CIA Triad?
A script changes financial records undetected
A DDoS attack makes a web service unreachable for hours
A user accidentally deletes sensitive files
A threat actor accesses encrypted communications
13
Which concept ensures information is not modified by unauthorized people?
Confidentiality
Accessibility
Availability
Integrity
14
How many core functions are in the NIST Cybersecurity Framework?
3
5
4
7
15
Which of these is considered a type of malware?
Sniffing
Trojan
Firewall
Honeypot
16
Which of the following is a phishing example?
Password manager
VPN
Firewall
Fake login email
17
What does the Purple Team do?
Audit
Only offensive
Combines red & blue roles
Only defense
18
Which two malware types are most likely to be combined in a modern ransomware attack?
Worm and Spyware
Trojan and Ransomware
Rootkit and Adware
Botnet and Keylogger
19
Which part of the CIA triad ensures systems are up and running when needed
Availability
Confidentiality
Assurance
Authorization
20
What does “compliance” mean in GRC?
Following applicable laws, standards, and rules
Following only internal policies
Antivirus updates
Vendor procurement
21
Who is responsible for enforcing cybersecurity policies?
HR
Everyone in the organization
Only IT
Only management
22
What is a key function of Red Teaming?
Building secure networks
Writing policies
Simulating real-world attacks
Cleaning malware
23
Which best defines "threat" in cybersecurity?
Legal regulation
Patch file
Potential cause of harm
Weakness in a system
24
What are security controls?
Permissions
Vulnerabilities
Safeguards
Threats
