AP Ck CyberSecurity Pre-Test

Front

Which of the following describes availability when referring to the CIA Triad? Options: Data are permanently deleted after use by authorized individuals. Data are only accessible by authorized individuals. Data are accurate and trustworthy when being viewed by authorized individuals. Data are accessible when required by authorized individuals.

Back

Data are accessible when required by authorized individuals.

Front

Which of the following is a potential effect of a breach involving data from a government system? Members of the public could have their PII compromised. The government will be able to access additional resources. Private industries will be given access to more government contracts. The government will reduce their spending on security features.

Back

Members of the public could have their PII compromised.

Front

Which of the following describes a state adversary?

Back

They are typically employed by a government and have access to more powerful tools than the average adversary.

Front

A risk manager is running a risk assessment for their organization. They have gathered all the assets that are in the scope of assessment and determined the value for each asset. What should be the risk manager's next step in the risk assessment?

Back

They should determine the vulnerabilities that would impact the assets.

Front

Which of the following is an example of a hardware vulnerability for a device? A device that uses insecure APIs. A device that allows unsanitized user inputs. A device that has imported third-party libraries. A device with out-of-date firmware.

Back

A device with out-of-date firmware.

Front

Which of the following proactive strategies help a cybersecurity professional determine threats that could impact a system they are trying to protect? They can run system health checks. They can set up user access controls. They can implement multi-factor authentication. They can think like an adversary would.

Back

They can think like an adversary would.

Front

Which of the following would be an example of something that might show up on a quantitative security vulnerability risk analysis? Options: The chance of a laptop being damaged is high. The probability of a laptop’s battery going bad is 4%. The impact of a laptop screen cracking is “critical”. The cost to replace a stolen laptop would be $800.

Back

The cost to replace a stolen laptop would be $800.

Front

An organization realizes that they have a significant amount of risk in a certain area and decide to purchase insurance to cover this risk. The policy ensures the insurance company would pay for any losses if the risk were to be exploited. Which type of risk management strategy was implemented?

Back

Risk transference

Front

Which of the following is a benefit of a defense-in-depth security strategy? It ensures that a security breach is detected immediately., It eliminates the need for regular security updates and patches., It reduces the overall cost of the security measures for an organization., It can limit the damage if one security control is bypassed by an adversary.

Back

It can limit the damage if one security control is bypassed by an adversary.

Front

Which of the following can help prevent against piggybacking? Cameras, Mantraps, Door locks, Card readers

Back

Mantraps