Cybersecurity II - Semester Exam Review by Mr. Benvenuto

Anny recently implemented an intrusion prevention system designed to block common network attacks from affecting his organization. What type of risk management strategy is Anny pursuing?

• Risk Acceptance

• Risk Avoidance

• Risk Mitigation

• Risk Transference

Which of the following principles expects an individual to behave reasonably under any given circumstance?

• Due Diligence

• Separation of Duties

• Due Care

• Least Privilege

What type of malware is characterized by spreading from system to system under its own power by exploiting vulnerabilities that do not require user intervention?

• Trojan Horse

• Virus

• Logic Bomb

• Worm

Which one of the following security programs are designed to establish a minimum standard common denominator of security understanding?

• Training

• Education

• Indoctrination

• Awareness

Which one of the following is an example of physical infrastructure hardening?

• Antivirus Software

• Hardware-based Network Firewall

• Two Factor-Authentication

• Fire Suppression System

Which information security goal is impacted when an organization experiences a DoS or DDoS attack?

• Confidentiality

• Integrity

• Availability

• Denial

What is the best way to provide accountability for the use of identities?

• Logging

• Authorization

• Digital Signatures

• Digital Signatures

Management support is critical to the success of a business continuity plan. Which of the following should be provided to the management to obtain their support?

• Business Case

• Business Impact Analysis

• Risk Analysis

• Threat Report

Which of the following is a critical first step in disaster recovery and contingency planning?

• Plan Testing and Drills

• Complete a Business Impact Analysis

• Determine Offsite Backup Facility Alternatives

• Organize and Create Relevant Documentation

What type of encryption is typically used for data at rest?

• Asymmetric Encryption

• Symmetric Encryption

• DES

• OTP