Test blanc

Cybersecurity activities should be coordinated by:

• Representatives from different parts of the organization with relevant roles and job functions

• The chief information security officer

• The cybersecurity program manager

“Level of risk” is defined with the following statement

• Magnitude of a risk expressed in terms of the potential vulnerabilities and the threats that they possess

• List of risks with value levels assigned

• Magnitude of a risk expressed in terms of the combination of consequences and their likelihood

The risk that remains after the implementation of controls aiming to reduce the inherent risk is defined as

• Treated risk

• Residual risk

• Avoided risk

Monitoring systems which do not respond to anything against incoming packets found within the Darknet IP domains refers to

• Black hole monitoring

• White hole monitoring

• Gray hole monitoring

Please determine the correct definition of threats in the cyberspace

• Potential cause of an unwanted incident, which may result in harm to a system, individual or organization

• Weakness of an asset or control that can be exploited

• Effect of uncertainty on objectives

The expression of the intent of the organization to treat the risks identified and/or to comply with requirements of organizational security is the objective of

• Cybersecurity program

• Information security program

• Cyberspace program

Which of the risk treatment options the organization is adopting, in the scenario when it has recently conducted a risk assessment of their IT systems and decided to cancel the e-commerce activity to eliminate the risk of an accidental phishing threat?

• Risk Modification

• Risk Elimination

• Risk Avoidance

which of the following is a type of malware?

• Worm

• Ransomwar

• Virus

• DoS

• DDoS

Which of the risk treatment options the organization is adopting, in the scenario when it has recently conducted a risk assessment of their IT systems and decided to implement a new data loss prevention system to reduce the likelihood of an accidental data breach?

• Risk Modification

• Risk Retention

• Risk Avoidance

Individual or organization having a right, share, claim or interest in a system or in its possession of characteristics that meet their needs and expectations is the definition of:

• Stakeholder

• Consumers

• Providers