stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Day 2 Fundamentals of Cybersecurity - Module 3 Flashcards | StudBud
Explore
/
Day 2 Fundamentals of Cybersecurity - Module 3
The NIST frameworks are:
Compliance means:
Day 2 Fundamentals of Cybersecurity - Module 3
25 terms
·
StudBud Administration
·
7 plays
Imported from external platform
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
Compliance means:
Hacking competitor systems
Adhering to internal and external regulations
Avoiding security controls
Ignoring company policies
2
The NIST frameworks are:
Voluntary guidelines for managing cybersecurity risks
Only for government agencies
Only about physical security
Mandatory for all U.S companies
3
The principle of Privacy Protection means:
Making all data public
Soring all data indefinitely
Safeguarding personal info from unauthorized use
Sharing personal info with partners
4
What is Integrity in the CIA Triad?
Data is encrypted
Data is deleted after use
Data remains accurate and unchanged
Data is always available online
5
What is a hacktivist?
A security analyst
A company CEO
A hacker motivated by political or social goals
A government employee
6
Availability ensures that:
Data can be accessed only during business hours
Authorized users can access data whenever needed
Data us kept secret from all users
Data is backed up monthly
7
It is legal in the U.S. for a private individual to launch a counterattack against a hacker
True
False
8
Which of the following is considered Sensitive Personally Identifiable Information (SPII)?
Credit card number
Phone number
Email Address
First name
9
What does SOC in SOC 1 and SOC 2 stand for?
System Operations Committee
Standard of Compliance
System and Organization Controls
Security Operations Center
10
Which law required organizations to protect patient health information?
HIPPA
SOX
GPDR
GLBA
11
Which of the following is
NOT
a component of a security framework?
Guidelines
Financial reporting
Communication
Processes
12
What should you do if you find out a classmate is cheating via messages and you have admin access?
Ignore it
Share messages with everyone
Do not read further and report to appropriate authority
Delete the messages
13
What is the purpose of the security center in a security framework?
To watch over and protect data
To create new projects
To manage employees vacations
To make company profits
14
What is the role of security governance?
To manage customer service
To define and direct security efforts within an organization
To plan company events
To develop software features
15
What is an ethical responsibility of a security professional?
To hack into competitor systems
To accept bribes for ignoring threats
To maintain confidentiality and privacy of data
To share all discovered vulnerabilities publicly
16
What is an example of a security control?
A firewall blocking unauthorized access
A marketing campaign
A company mission statement
An employee holiday schedule
17
Which of the following is
NOT
considered Personally Identifiable Information (PII)?
Social Security Number
Address
Name
Company Logo
18
What is the primary purpose of a security framework?
To protect important data and mitigate risks
To create marketing plans
To increase company profits
To improve employee satisfaction
19
Security ethics require professional to remain unbiased and honest
False
True
20
What should you do if you're given access to sensitive company data not related to your job?
Explore the data for fun
Ignore the access
Share it with friends
Inform your supervisor or manger
21
What U.S. agency developed the Cybersecurity Framework (CSF)?
FDA
NIST
CIA
FCC
22
The CIA Triad stands for:
Confidentiality, Integrity, Availability
Confidentiality, Identification, Access
Control, Investigation, Authorization
Control, Integrity, Availability
23
Which of these is a key ethical concern for security professionals?
Winning hacking contests
Selling data to third parties
Safeguarding privacy
Ignoring security roles
24
What does Confidentiality mean in cybersecurity?
Data is only accessed by authorized users
Data is regularly backed up
Data is always available
Data is encrypted
25
What does HIPPA require organizations to do after a data breach?
Delete all data
Hide the breach
Increase marketing
Notify affected patients
