Intro Cyber Chapter 1 Exam

A recent attack was successful against one of an organization's systems. Which of these is NOT a configuration issue?

Which security position deals with analyzing & designing security solutions as well as identifying users' needs?

  These folks are strongly motivated by ideology (for the sake of their principles/beliefs) 

Person who uses advanced computer skills to attack a computer, without malicious intent.

A person who violates system security with malicious intent

  What are industry-standard frameworks and reference architectures that are required by external agencies known as?

People who want to break into computers to create damage, but lack the advanced knowledge to write their own scripts

Why do cyberterrorists target power plants, air traffic control centers, and water systems?

Which of the following statements explains the relationship between security and convenience in cybersecurity?

Requires a user to transport it from one computer to another, but can reproduce itself on the same computer?

Act requires banks & financial institutions to alert customers of their policies in disclosing customer information

Category of threat actors that sell their knowledge of vulnerabilities to other attackers or governments?

An event or object which might defeat security measures in place to protect assets.

Protecting integrity, confidentiality, availability of information in transmission, use, or storage is:

Which of the following ensures that only authorized parties can view protected information? 

  Which tool is most commonly associated with nation state threat actors?

which of the following does NOT focus on the issue of widespread vulnerabilities?

Which the following is NOT a reason why it is difficult to defend against today’s attackers? 

An organization that practices purchasing products from different vendors is demonstrating which security principle?

  A thing or entity of value to a person or organization is known as a(n)

Which of the following is NOT a risk response technique?

Which security principle deals with not revealing the type of computer/OS/software & network connections used?

A spammer who wants to reach the most possible victims with the least effort would use which of these?

  Which of the following is an enterprise critical asset? 

Taking advantage of a known weakness or vulnerability in a computer system is known as:

Which of the following is NOT a successive layer in which information security is achieved?

What is an objective of state-sponsored attackers?