Which of the following controls is best suited to prevent vulnerabilities related to software updates?

Centralized patch management software

Reduced the organization’s attack surface

An administrative, corrective control

Encryption of all files sent outside the organization

Which one of the following is not a common use of the NIST Cybersecurity Framework?

Create specific technology requirements for an organization.

Sending logs to a syslog server

studbud

Duplicate of CySA+ Ch 9 & 10 Version B

20 termsStudBud Administration3 plays

Imported from external platform

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
Which of the following controls is best suited to prevent vulnerabilities related to software updates?
Vulnerability scanning
An IPS with appropriate detections enabled
Centralized patch management software
Operating system patching standards
2
You are helping HR create a policy for background checks for new hires. What type of control are you creating?
Physical
Technical
Logical
Administrative
3
Which one of the following policies would typically answer questions about when an organization should destroy records?
Password policy
Data ownership policy
Account management policy
Data retention policy
4
See Below
Standard
Procedure
Guideline
Policy
5
Selah’s design for network security is shown in the following graphic. What design model has she used for her network?
Protected enclave
Information-based design
Uniform protection
Threat analysis–based design
6
See Below
Added an administrative control
Implemented defense in depth
Added a corrective control
Reduced the organization’s attack surface
7
What type of control is creating firewall rules to block DDOS attacks from entering your network?
Physical
Root access
Administrative
Logical
8
Which security policy framework component does not contain mandatory guidance for individuals in the organization?
Standard
Procedure
Guideline
Policy
9
See Below
A technical, corrective control
A physical, detective control
An administrative, corrective control
A corrective, compensatory control
10
See Below
DLP monitoring of all outbound network traffic
Network segmentation for sensitive data handling systems
Mandatory data tagging policies
Encryption of all files sent outside the organization
11
See Below
A WAF
Least privilege for accounts
A patch from the vendor
An IDS
12
Where is this single point of failure?
Point C
Point D
Point A
Point B
13
See Below
Tier 2
Tier 3
Tier 4
Tier 1
14
See Below
Automated reporting
Log aggregation
Trend analysis
BGP graphing
15
What compliance obligation applies to merchants and service providers who work with credit card information?
FERPA
PCI DSS
HIPPA
SOX
16
Which one of the following is not a common use of the NIST Cybersecurity Framework?
Communicate with stakeholders about cybersecurity risk.
Describe the current cybersecurity posture of an organization.
Create specific technology requirements for an organization.
Describe the target future cybersecurity posture of an organization.
17
See Below
ISO 27001
COBIT
TOGAF
ITIL
18
See Below
Policy
Standard
Procedure
Guideline
19
See Below
Using TLS to protect traffic
Using full-disk encryption
Using log rotation
Sending logs to a syslog server
20
See Below
File integrity checking
Configuration management
Anti-malware
Logging

Duplicate of CySA+ Ch 9 & 10 Version B Flashcards | StudBud