Why is regulatory compliance a key component of IT security reporting?

To meet legal obligations and avoid penalties during audits

Data Exfiltration Attack! What is the next best step after confirming unauthorized data transfer has occurred?

Isolate affected systems from the network

Which of the following best describes responsibilities during the preparation phase of the incident response process?

Developing policies, training staff, and establishing response tools

Which of the following IoCs would most likely indicate a phishing attack?

Multiple users reporting suspicious emails with bad links or attachments

During a cybersecurity event, which of the following groups should be informed first to ensure a coordinated response?

Incident response, IT security, executive leadership, and legal/compliance

Which of the following Indicators of Compromise (IoCs) would most likely suggest a ransomware attack?

Files with strange extensions and ransom notes in directories

During a cybersecurity incident, what is the primary responsibility of the Public Relations (PR) team?

Managing external communication and protecting organization’s public image

studbud

Timothy

8 termsStudBud Administration18 plays

Anotha one, Day 8 (case of the mondays)

Flashcards8 cardsFPractice quizPHost liveL

Questions 8

Answers

1
Why is regulatory compliance a key component of IT security reporting?
To reduce hardware costs in data centers
To ensure internal teams are trained on new technologies
To prevent data from being stored in the cloud
To meet legal obligations and avoid penalties during audits
2
Data Exfiltration Attack! What is the next best step after confirming unauthorized data transfer has occurred?
Resume normal operations
Begin public disclosure immediately
Isolate affected systems from the network
Reimage all potentially affected machines
3
Which of the following best describes responsibilities during the preparation phase of the incident response process?
Developing policies, training staff, and establishing response tools
Reporting incidents to regulatory authorities
Collecting volatile memory from compromised systems
Removing malicious software from affected hosts
4
Which of the following IoCs would most likely indicate a phishing attack?
Port 3389 open to the internet on several endpoints
Unexpected outbound DNS queries to rare domains
High CPU usage on a database server
Multiple users reporting suspicious emails with bad links or attachments
5
During a cybersecurity event, which of the following groups should be informed first to ensure a coordinated response?
Third-party vendors, new hires, training department, and R&D
Incident response, IT security, executive leadership, and legal/compliance
Facilities management, HR, procurement, and logistics
Sales team, customer support, product development, and marketing
6
Which of the following Indicators of Compromise (IoCs) would most likely suggest a ransomware attack?
Unauthorized port scanning activity on internal hosts
Files with strange extensions and ransom notes in directories
Repeated login attempts from international IPs
Suspicious privilege escalation attempts
7
During a cybersecurity incident, what is the primary responsibility of the Public Relations (PR) team?
Coordinating technical response with the IT team
Conducting forensic analysis of affected systems
Implementing firewall and access control updates
Managing external communication and protecting organization’s public image
8
Which of the following frameworks would most likely be addressed within a healthcare organization's GRC program?
PCI DSS
GDPR
HIPAA
FERPA

Timothy Flashcards | StudBud