3 курс Cybersecurity Compliance Framework & System Administratio

Which of the bad guys are described as "They are "in" an organization but are human and make mistakes"?

• Inadvertant Actor

• Malicious Insiders

• Outsiders

• Employees

Which is NOT one of the security controls?

• Physical

• Operational

• Testing

• Technical

What year did the European Union start enforcing GDPR?

• 2018

• 2017

• 2016

• 2014

Which three (3) of these obligations are part of the 5 key GDPR obligations?

• Consent

• Security of Public Data

• Accountability of Compliance

• Rights of EU Data Subject

Which is the foundational principle that everyone will get during a SOC audit?

• Privacy

• Availability

• Security

• Confidentiality

The HIPAA security rule requires covered entites to maintain which two (2) reasonable safeguards for protecting e-PHI?

• Physical

• Technical

• Operational

• Informational

HIPAA Administrative safeguards include which two (2) of the following?

• Security Personnel

• Access Controls

• Integrity Controls

• Workforce Training and Management

PCI includes 264 requirements grouped under how many main requirements?

• 5

• 10

• 12

• 20

If you are a mature organization which CIS Controls Implementation Group would you use?

• Implementation Group 3

• Implementation Group 2

• Do not need a controls implementation group due to maturity of my organization

• Implementation Group 1

A security attack is defined as which of the following?

• All cybersecurity events.

• An event that has been reviewed by analysts and deemed worthy of deeper investigation.

• An event that has been identified by correlation and analytics tools as a malicious activity.

• An event on a system or network detected by a device.