Cyber Security Flashcard

Front

What is meant by 'integrity' in the context of cyber security?

Back

Ensuring data is accurate and trustworthy

Answer explanation

In cyber security, 'integrity' refers to ensuring that data remains accurate and trustworthy throughout its lifecycle. This is crucial for maintaining the reliability of information and preventing unauthorized alterations.

Front

What is a key aspect of recovering from a cyber security incident?

Back

Confirm the system is functioning normally

Answer explanation

A key aspect of recovering from a cyber security incident is to confirm the system is functioning normally. This ensures that any vulnerabilities have been addressed and the system is secure before resuming operations.

Front

What should be identified in a cyber security incident report? Options: Type of attacker(s), Personal opinions, Unrelated events, Financial statements

Back

Type of attacker(s)

Answer explanation

In a cyber security incident report, identifying the type of attacker(s) is crucial for understanding the threat landscape and improving defenses. Personal opinions, unrelated events, and financial statements are not relevant to the incident analysis.

Front

What should be confirmed after responding to a cyber security incident? Options: The system is functioning normally, The system is permanently down, The system is ignored, The system is overloaded

Back

The system is functioning normally

Answer explanation

After a cyber security incident, it's crucial to confirm that the system is functioning normally to ensure that all services are restored and secure. This helps in verifying that the incident response was effective.

Front

What should be updated as part of future management? Options: Office furniture, Documentation, key information, procedures, and controls, Employee uniforms, Company logo

Back

Documentation, key information, procedures, and controls

Answer explanation

Updating documentation, key information, procedures, and controls is crucial for effective future management. This ensures that all processes are current, compliant, and efficient, which is essential for organizational success.

Front

Which of the following is NOT a part of future management after an incident?

• Recommendations of changes
• Evaluation of trends
• Launching a new marketing campaign
• Update of documentation

Back

Launching a new marketing campaign

Answer explanation

Launching a new marketing campaign is not a part of future management after an incident. The other options focus on assessing and improving processes, while a marketing campaign is unrelated to incident management.

Front

What is a key consideration in the cost of an incident? Options: Employee bonuses, Recovery time, Office renovations, New product development

Back

Recovery time

Answer explanation

Recovery time is a crucial factor in incident costs, as it directly impacts productivity and resources. Longer recovery times can lead to increased expenses, making it a key consideration compared to other options.

Front

What is a recommended action after reviewing an incident?

Back

Recommendations of changes

Answer explanation

After reviewing an incident, it is crucial to make recommendations of changes to prevent future occurrences. This proactive approach helps improve processes and enhances overall safety and efficiency.

Front

What is a crucial step in preparing for potential cyber security incidents?

Back

Developing an incident response plan

Answer explanation

Developing an incident response plan is crucial as it prepares organizations to effectively handle cyber security incidents, minimizing damage and recovery time. Ignoring threats or reducing security measures increases vulnerability.

Front

What is a primary goal of incident response? Options: To increase system downtime, To minimize damage and recovery time, To complicate the recovery process, To ignore the incident

Back

To minimize damage and recovery time

Answer explanation

The primary goal of incident response is to minimize damage and recovery time. This ensures that systems can be restored quickly and efficiently, reducing the overall impact of the incident.