The Cybersecurity Landscape

A list of email addresses from customers of the Splunk T-Shirt company has been disclosed by accident. What are the most likely impacts of this incident? (Select 2)

• • The company will have to pay attorney's fees

• • 
    Increased risk of Identity theft for individuals

• • Interruption of critical services

• • 
    Damage to the company's reputation

What is the best course of action for Risk Identification in this scenario: An organization moves their data center to an area away from frequent natural disasters

• Accept

• Avoid

• Mitigate

• Transfer

What is the best course of action for Risk Identification in this scenario: An organization decides to use third-party cloud software instead of developing in-house

• Avoid

• Accept

• Mitigate

• Transfer

What is the best course of action for Risk Identification in this scenario: An organization installs Anti-Malware software on employee devices

• Mitigate

• Avoid

• Acceptance

• Transfer

What is the best course of action for Risk Identification in this scenario: An organization documents the risk of offering their services online

• Avoid

• Transfer

• Accept

• Mitigate

Which of the frameworks mentioned in this course represents a broad consensus about the most critical security risks to web applications?

• OWASP Top 10

• ISO/IEC 27000 series

• CIS 18

• NIST CSF

What does Authorization mean?

• No party can deny the validity of the data

• Ensuring that protected information is only seen by those who are meant to see it

• Being able to verify the identity of a user, process or device

• Refers to the access that should be granted to a user, process or device

A database including names, addresses and credit card information from customers of an organization has been posted on a publicly accessible website.  

Which of the component of the CIA Triad has been broken in this situation?

• Confidentiality

• Integrity

• Availability

How would you classify the information in a company's social media post?

• As Private data

• As Confidential data

• As Public data

In order to fulfill orders, employees in the Shipping department of the Splunk T-Shirt company require access to customer addresses, however they do not require access to the same customer's credit card information.  This is an example of what concept related to the CIA Triad?

• Authentication

• Authenticity

• Availability

• Authorization