Cybersecurity Framework

Which of the following best describes the Identify function of the IPDRR Framework.

• Identify who should be held responsible if incident happen.

• Identify the attack on the system.

• Identify and understand the systems, assets, data and capabilities of the organization.

• Identify and understand the organization risk assessment and risk management strategy.

Access control is part of the Protect function of IPDRR. Which of the following is not part of access control.

• Two-factor authentication

• Encrypt data

• Deploy security guards

• Remove unused accounts

Firewall generally works on

• Layer 1 and 2 of OSI model

• Layer 3 and 4 of OSI model

• Layer 6 and 7 of OSI model

• All of the above

Which of the following is an IDS capable of?

• Alerting

• Taking action

• Detection

• Identify Attack

What is the purpose of a honeypot?

• To flag attack against known vulnerabilities.

• To reduce false positives in a signature-base IDS

• To randomly check suspicious traffic identified by IDS

• To enhance the accuracy of a IDS

What is the purpose of an anti-virus?

• Analyse and monitor network traffic for signs that indicate attackers are using known cyberthreat to infiltrate or steal data from a network.

• Able to identify malicious activity, report it and block it.

• Limits access between networks to prevent intrusion and do not signal an attack from inside the network.

• To detect and destroy known threats.

Which is the wrong step to respond to a cyber-incident.

• Turn off involved computer system.

• Disconnect the computer system from all network

• Isolate all involved computer system.

• Communicate with stakeholders, law enforcement and/or external stakeholders

This regulates the collection, user and disclosure of personal data by organisations. Which regulation does this falls under?

• Computer Misuse Act (CMA)

• Personal Data and Protection Act (PDPA)

• Cybersecurity Act

• None of the Above

This act provides a framework for the designation of Critical Information Infrastructure (CII), and provides CII owners with clarity on their obligations to proactively protect the CII from cyber-attacks.

• Computer Misuse Act (CMA)

• Personal Data and Protection Act (PDPA)

• Cybersecurity Act

• None of the Above

Any person who knowingly cause a computer to perform any function for the purpose of securing access without authority to any program/data in any computer shall be guilty of an offense. Which regulation does this falls under?

• Computer Misuse Act (CMA)

• Personal Data and Protection Act (PDPA)

• Cybersecurity Act

• None of the Above