SARM CO5 QUIZ

Which are not the E-Commerce security threats among the following:

i. Ransomeware

ii. No SSL

iii. SQL Injection

iv. e- skimming

v. weak firewalls

vi. xss Attack

• i and ii

• ii and v

• i, iii,iv and vi

• all the above

What is a push Attack?

• The attack is a type of attack where the attacker controls the device and handles it in his/her way

• The attacker can get some of the network services by getting unauthorized access. After capturing the message, he/she can reply to it with some modifications to the same destination or another.

• The attacker creates a malicious code at the user's mobile device by hacking it and then he/she may spread it to affect other elements of the network.

• The attackers convince the mobile end-point or the mobile user to drop its connection and re-connection to get a new signal

What is a pull attack?

• The attacker creates a malicious code at the user's mobile device by hacking it and then he/she may spread it to affect other elements of the network.

• Attack is a type of attack where the attacker controls the device and handles it in his/her way. He can decide which emails they want to receive.

• The attackers convince the mobile end-point or the mobile user to drop its connection and re-connection to get a new signal.

• The attacker can get some of the network services by getting unauthorized access.

What are the elements of ERP security?

i. Infrastructure security

ii. Network security

iii. Operating system security

iv. Database security

• i and ii

• ii and iii

• iii and iv

• All

Which among the following are not the ERP Security Best Practices to Secure ERP Software

i   Strong & Safe Password Hygiene

ii Keep someone in the Loop

iii Stay Secure from External Risks

• i only

• ii only

• i and iii only

• All

Which is the correct sequence of Cyber security Risk Assessment steps

1 Risk Evaluation

2 Risk Identification

3 Documentation

4 Scoping

5 Risk Analysis

• 4->2->5->1->3

• 1->2->3->4->5

• 4->1->5->2->3

• 4->3->5->1->2

Which among the following is not a risk treatment?

i Risk Transfer

ii Risk Retention

iii Risk Control

iv Risk Delegation

v Risk Avoidance

vi Risk Evasion

• i, ii, iii and v

• iv and vi

• iii,iv,v, and vi

• All

The Department of Defense (DoD) Risk Management Framework (RMF) defines guidelines that DoD agencies use. From the statements given below choose the correct statement of RMF ?

• The goal of RMF is to guide enterprises through the process of making well-informed decisions when creating cybersecurity best practices.

• RMF offers a certifiable set of standards defined to systematically manage risks posed by information systems

• RMF splits the cyber risk management strategy into six key steps—categorize, select, implement, assess, authorize, and monitor.

• RMF framework provides a comprehensive set of best practices that standardize risk management

Which formula is used for Calculation of cyber risk in an IT infrastructure

• Cyber risk = Threat x Vulnerability x Information Memory

• Cyber risk = Threat x Salary of Employee x Information Value

• Cyber risk = Attack x Vulnerability x Information Value

• Cyber risk = Threat x Vulnerability x Information Value

Ranking likelihood on a scale of 1: Rare to 5: "Highly Likely," and impact on a scale of 1: Negligible to 5: "Very Severe,"

What is the matrix created based on the above scale?

• Confusion Matrix

• Risk Matrix

• Vulnerability Matrix

• Identity Matrix