Sec+ Security Controls

• Which cybersecurity framework is widely used for managing and improving an organization's cybersecurity posture?

• ISO 9001

• • NIST

• HIPAA

• • PCI DSS

What does the "CIA Triad" stand for in the context of cybersecurity?

• Centralized, Integrated, and Automated

• 
  Compliance, Incident Response, and Analysis

• Cybersecurity, Intrusion Detection, and Authentication

• Confidentiality, Integrity, and Availability

What type of attack involves tricking a user into revealing confidential information by pretending to be a legitimate entity?

• 
  Phishing

• SQL Injection

• DDoS

• Ransomware

Which of the following is NOT considered a physical security control?

• Security Guards

• Firewalls

• Biometric Authentication

• 
  Fencing and Access Gates

Which cybersecurity framework is primarily focused on the healthcare industry and the protection of patient information?

• 
  ISO 27001

• CIS Critical Security Controls

• HIPAA

• NIST SP 800-53

What is the term for a cyber threat actor who is hired by an organization to test its cybersecurity defenses legally?

• Unauthorized hacker

• Authorized hacker

• Script kiddie

• Semi-authorized hacker

What is the primary goal of a penetration test?

• To simulate an attack to identify weaknesses

• To monitor network traffic

• To patch vulnerabilities

• To encrypt sensitive data

Which of the following is a common motivation for hacktivist threat actors?

• Gathering competitive intelligence

• Promoting a social or political cause

• Financial gain

• Stealing intellectual property

What is the primary goal of cyber threat intelligence?

• To prevent all cyberattacks

• To provide timely and relevant information about potential threats

• To gather evidence for legal prosecution

• 
  To encrypt sensitive data

Is assessed by the likelihood of a vulnerability being exploited and the impact it may cause.