Cybersecurity Risk Assessment Quiz

Which of the following is the first step in conducting a cybersecurity risk assessment?

• Identify Threats

• Identify Vulnerabilities

• Identify Assets

• Calculate Risk

What type of threat includes cybercriminals and hackers?

• Internal Threats

• External Threats

• Supply Chain Threats

• Procedural Threats

Which of the following controls is an example of a preventive control?

• Firewalls

• Incident Response Plans

• Backups

• Intrusion Detection Systems

What is the formula used to calculate risk in a cybersecurity risk assessment?

• Risk = Likelihood + Impact

• Risk = Likelihood x Impact

• Risk = Threats x Vulnerabilities

• Risk = Threats + Vulnerabilities

Which framework provides guidelines for managing cybersecurity risks through five core functions: Identify, Protect, Detect, Respond, and Recover?

• ISO/IEC 27001

• COBIT

• NIST Cybersecurity Framework

In the context of cybersecurity, what does the acronym FAIR stand for?

• Flexible Analysis of Information Risk

• Factor Analysis of Information Risk

• Formal Assessment of Information Risk

• Framework for Information Risk

Which ethical decision-making framework focuses on maximizing overall happiness or minimizing harm?

• Utilitarian Approach

• Rights-Based Approach

• Justice Approach

• Common Good Approach

In a cybersecurity risk assessment, which of the following is considered an internal threat?

• Phishing attacks

• DDoS attacks

• Insider theft

• Malware

What type of control is implemented to detect and alert on threats?

• Preventive Controls

• Detective Controls

• Corrective Controls

• Protective Controls

Which approach in ethical decision-making emphasizes actions that contribute to the community's welfare?

• Utilitarian Approach

• Rights-Based Approach

• Justice Approach

• Common Good Approach