What does the CIA triad stand for?

Confidentiality, Integrity, Availability

What is Proprietary Intelligence in cybersecurity?

Information collected by an organization's internal resources

What is a zero-day exploit?

Exploiting a newly discovered flaw

What are the three key factors used to characterize adversarial threat sources or actors?

Capability, intent, opportunity

What does "Non-Repudiation" mean in cybersecurity?

Protection against individual falsely denying performing particular actions

What does "Risk" refer to in cybersecurity?

Chance a threat exploits a vulnerability

What does the 'Recover' function in CSF ensure?

Restores operational capabilities

What is the purpose of the Common Vulnerability Scoring System?

Standardize vulnerability scores

studbud

Duplicate of Block III Quiz Review

75 termsStudBud Administration2 plays

F-0303L + F-0302L + F-0301L

Flashcards75 cardsFPractice quizPHost liveL

Questions 75

Answers

1
Which intelligence source uses electronic signals?
SIGINT
OSINT
HUMINT
CSINT
2
What capability does the 616th OC provide?
Software development
Threat analysis
Operational C2
Cyber training
3
What types of assessments does the National Air and Space Intelligence Center (NASIC) conduct?
Foreign cyberspace
Local threats
Software bugs
Network logs
4
What does cybersecurity primarily protect?
Cyberspace
Human resources
Financial data
Physical assets
5
What is an example of a passive attack?
Physical access
Malware deployment
Direct system modification
Data interception
6
Which framework focuses on IT governance and management?
COBIT
PASTA
NIST CSF
MITRE ATT&CK
7
What does the CIA triad stand for?
Confidentiality, Integrity, Availability
Control, Information, Availability
Control, Integrity, Access
Confidentiality, Identity, Access
8
What does the 'Identify' function in CSF do?
Govern policies
Recognize risks
Recover from incidents
Implement security safeguards
9
What does the 'Protect' function in NIST CSF do?
Implement security safeguards
Restores operations
Assesses risks
Detects incidents
10
Which scoring system rates vulnerabilities?
PASTA
CVSS
COBIT
STRIDE
11
True or false: All hackers have malicious intent.
True
False
12
Which method profiles hypothetical attackers?
D3FEND
Persona non grata
PASTA
COBIT
13
What does feedback improve?
Software bugs
User feedback
Intelligence cycle
Network logs
14
True or false: The CIA triad includes Confidentiality, Integrity, and Availability.
True
False
15
What is a key feature of attack trees?
Single entry point
Focus on hardware
No visualization
Multiple attack paths
16
Which intelligence source is publicly available?
HUMINT
OSINT
CSINT
TECHINT
17
What does the intelligence cycle help with?
User feedback
Data analysis
Network setup
Software development
18
What is the purpose of penetration testing?
Develop software applications
Create user accounts
Monitor network traffic
Measure system strengths
19
What is Proprietary Intelligence in cybersecurity?
External Network logs
Information collected by an organization's internal resources
Data gathered from external threat feeds
Publicly available intelligence reports
20
What is a zero-day exploit?
Exploiting a newly discovered flaw
A type of malware
A common attack method
An outdated system
21
True or false: Passive intelligence requires more resources.
False
True
22
What is the goal of a cyberattack?
To enhance security
To disrupt operations
To gather intelligence
To improve systems
23
What is the role of the Intelligence, Surveillance, and Reconnaissance Division (ISRD)?
Software development
Cyber training
Threat analysis
Intelligence C2
24
What is the goal of risk mitigation?
Increase vulnerabilities
Limit user access
Reduce potential losses
Enhance attack methods
25
What does the 'Govern' function in CSF establish?
User training program
Network monitoring system
Incident response plan
Risk management strategy
26
What are the three key factors used to characterize adversarial threat sources or actors?
Malware, exploits, and vulnerabilities
Resources, tools, and timing
Expertise, damage, and targeting
Capability, intent, opportunity
27
Which of the following is a common attack vector?
Backup
Malware
Firewall
Encryption
28
Which Threat Modeling method utilizes an open-source matrix tool that integrates assets, rules, and actors?
COBIT
Trike
STRIDE
Cyber Kill Chain
29
What does "Non-Repudiation" mean in cybersecurity?
Protection against individual falsely denying performing particular actions
Regularly backing up data
Preventing unauthorized access to data
Ensuring data is encrypted during transmission
30
Which attack vector involves overloading a system?
Phishing
Denial-of-Service
Malware
SQL Injection
31
What is the main focus of the CIA triad?
Data protection
User training
Network monitoring
Software development
32
What is the impact of a cyberattack?
Enhanced performance
Increased security
Loss of data
Improved defenses
33
Which intelligence method is riskier due to directly engaging with the target?
Passive
Human
Active
Technical
34
Which step comes first in the Threat Modeling Process?
Mitigate threats
Define assets
Visualize pathways
Validate controls
35
What activities are involved in Human Intelligence (HUMINT) gathering?
Signal interception
Human sources
Network monitoring
Technical analysis
36
What does the term 'threat actor' refer to?
A malicious individual
A computer malware
A company that sells security software
A team that protects systems
37
True or false: Insider threats can be unintentional.
True
False
38
Who is the audience for tactical intelligence?
Board members
Executives
SOC analysts
General public
39
What does "Risk" refer to in cybersecurity?
The type of attack
Process of encrypting information
The level of security
Chance a threat exploits a vulnerability
40
True or false: Cybersecurity is only for large organizations.
True
False
41
What does the STRIDE method analyze?
User satisfaction
Hardware costs
Network speed
Threat types
42
True or false: Threat modeling is a linear process.
True
False
43
What is the purpose of authentication?
Encrypt data
Verify user identity
Monitor network traffic
Store sensitive information
44
What does AFOSI conduct?
Criminal investigations
Threat analysis
Software development
Cyber training
45
What is a common motivation for cybercriminals?
Political change
Ideological beliefs
Financial gain
Personal satisfaction
46
Which term describes malicious activities against systems?
Cyber threat
Cyberattack
Cyber defense
Cybersecurity
47
What does the 'Recover' function in CSF ensure?
Identifies risks
Governs policies
Implements security safeguards
Restores operational capabilities
48
What does operational intelligence provide?
Human insights
Long-term trends
Real-time information
Technical analysis
49
What does CSINT identify?(Closed Source Intelligence)
User feedback
Network logs
Simple threats
Advanced threats
50
What is the purpose of the Common Vulnerability Scoring System?
Create user accounts
Develop software applications
Standardize vulnerability scores
Monitor network traffic
51
Which threat actor focuses on countering cyber threats?
Black Hat
Green Hat
White Hat
Red Hat
52
What is the main focus of ISO 27001?
User training
Hardware upgrades
Network speed
Information security management
53
What is the purpose of MITRE ATT&CK?
Increase bandwidth
Understand attacker methods
Monitor user activity
Encrypt all data
54
True or false: Cyber Kill Chain describes the attack process.
False
True
55
What is strategic intelligence focused on?
Human sources
Real-time data
Technical details
High-level overview
56
Which process simulates attacks for testing?
Risk assessment
Penetration testing
Data backup
Governance review
57
What does the intelligence cycle adapt to?
Software bugs
Organizational needs
User feedback
Network logs
58
What is the primary focus of the MITRE D3FEND™ framework?
Developing new offensive techniques
Cyber adversary behavior
Automating cybersecurity processes
Defensive countermeasures for offensive techniques
59
What is the main goal of threat modeling?
Reduce hardware costs
Expand user access
Increase network speed
Strengthen cybersecurity
60
What does the NIST Cybersecurity Framework focus on?
Data encryption
Cybersecurity risk management
Risk assessment
User training
61
What is technical intelligence focused on?
Detailed analysis
High-level overview
Real-time data
Human sources
62
What is the purpose of threat intelligence in cybersecurity
Process of gathering, analyzing and understanding threats
Identifying vulnerabilities in software
Responding to cyber threats in real time
Automating cybersecurity defenses
63
What is the purpose of the 'Dissemination' step?
Feedback provision
Data collection
Information distribution
Threat analysis
64
What does the 'Mitigate' function in CSF involve?
Recover from incidents
Govern policies
Apply cybersecurity safeguards
Identify risks
65
What does TECHINT provide?
High-level overview
Real-time data
Human insights
Technical insights
66
Which step of the Cyber Threat Intelligence Lifecycle focuses on gathering information?
Processing
Direction
Collection
Feedback
67
What is the primary focus of the PASTA threat modeling framework?
Ensuring compliance with security standards
Automating threat detection processes
Viewing the application from an attacker's perspective
Developing software without vulnerabilities
68
Which is NOT a NIST CSF Core function?
Recover
Protect
Identify
Monitor
69
What is the benefit of combining intelligence methods?
Resource saving
Comprehensive understanding
Limited overview
Risk reduction
70
What does threat research enhance?
Network monitoring
Threat data and intelligence
User training
Software development
71
What is a vulnerability in cybersecurity?
A system flaw
A threat actor
A strong defense
A security measure
72
Which threat actor is known for ethical hacking?
Black Hat
Grey Hat
White Hat
Red Hat
73
True or False? A threat event is a situation that has the potential to cause an impact.
False
True
74
What does the 'Detect' function in CSF involve?
Implement security controls
Establish risk management
Recognize cybersecurity events
Govern policies
75
What does the Cyber Kill Chain emphasize?
Disrupting attack steps
Increasing bandwidth
Encrypting all data
User training

Duplicate of Block III Quiz Review Flashcards | StudBud