Chapter 01 - Basic Objectives of CS

Which category of control is focused on the management of security policies and procedures within an organization?

• Operational

• Technical

• Corrective

• Managerial

Jade's organization recently suffered a security breach that affected stored credit card data. Jade's primary concern is the fact that the organization is subject to sanctions for violating the provisions of the Payment Card Industry Data Security Standard. What category of risk is concerning Jade?

• Strategic

• Compliance

• Operational

• Financial

Chris is responding to a security incident that compromised one of his organization's web servers. He believes that the attackers defaced one or more pages on the website. What cybersecurity objective did this attack violate?

• Confidentiality

• Nonrepudiation

• Integrity

• Availability

Gwen is exploring a customer transaction reporting system and discovers the table shown here. What type of data minimization has most likely been used on this table?

• Destruction

• Masking

• Tokenization

• Hashing

Tonya is concerned about the risk that an attacker will attempt to gain access to her organization's database server. She is searching for a control that would discourage the attacker from attempting to gain access. What type of security control is she seeking to implement?

• Preventive

• Detective

• Corrective

• Deterrent

Greg is implementing a data loss prevention system. He would like to ensure that it protects against transmissions of sensitive information by guests on his wireless network. What DLP technology would best meet this goal?

• Watermarking

• Pattern recognition

• Host-based

• Network-based

What term best describes data that is being sent between two systems over a network connection?

• Data at rest

• Data in motion

• Data in processing

• Data in use

Tina is tuning her organization's intrusion prevention system to prevent false positive alerts. What type of control is Tina implementing?

• Technical control

• Physical control

• Managerial control

• Operational control

Which one of the following is not a common goal of a cybersecurity attacker?

• Disclosure

• Denial

• Alteration

• Allocation

Tony is reviewing the status of his organization's defenses against a breach of their file server. He believes that a compromise of the file server could reveal information that would prevent the company from continuing to do business. What term best describes the risk that Tony is considering?

• Strategic

• Reputational

• Financial

• Operational