Cybersecurity Essentials Chapter 6 Review

Which of the following is NOT a strategy to ensure high availability?

• Eliminate single points of failure.

• Design for reliability.

• Detect failures as they occur.

• Take systems offline at night for updates.

Which organizations would rely on high availability systems?

(PIck 3)

• banks

• hospitals

• fire department

• retail businesses

• schools

What types of things would be documented in a asset database?

(PIck 3)

• operating systems

• software applications

• networking devices

• employees

• work groups

What are three criteria used to classify organization assets?

(PIck 3)

• Identify owner of information assets

• Identify the importance of the asset

• Identify the category of asset it is

• Identify the age of the asset

• Identify how often the asset is used

This type of analysis is being done if a list of all equipment's value is being tallied?

• quantitative

• qualitative

This type of analysis is being done if employees are being asked rank how likely it would be for a certain type of threat to occur.

• quantitative

• qualitative

Buying insurance is an example of this type of risk mitigation.

• avoidance

• transference

• reduction

• acceptance

Changing the way you do things so a risk is less likely.

• avoidance

• transference

• reduction

• acceptance

Encrypting files on a server that is behind a firewall in a building with watch dogs is an example of this defense strategy.

• Layering

• Limiting

• Diversity

• Obscurity

• Simplicity

Changing file permission to be more restrictive is an example if this type of defense strategy.

• Layering

• Limiting

• Diversity

• Obscurity

• Simplicity