Module 13 (Fundamentals of Cybersecurity)

1. The principle of (a)   means giving users only the permissions they absolutely need to perform their jobs.

1. (a)   is a widely used open-source knowledge base that details the various stages of a cyber attack.

1. The process of collecting, preserving, and analyzing digital evidence is called (a)   .

4. Discretionary Access Control (DAC) is a stricter, label-based system where access is determined by sensitivity levels. (True/False)

• True

• False

4. A runbook provides higher-level guidance outlining the overall response to different incident types. (True/False)

• True

• False

4. Maintaining a documented chain of custody is not important for ensuring the admissibility of evidence in court. (True/False)

• True

• False

7. Which of the following is NOT a common motivation for cybersecurity attacks?

• 7. Financial gain

• 7. Espionage

• 7. Philanthropy

• 7. Disruption and chaos

Which access control scheme assigns permissions based on job roles?

• Mandatory Access Control (MAC)

• Discretionary Access Control (DAC)

• Role-Based Access Control (RBAC)

• None of the above

Which type of exercise involves discussion-based scenarios to practice decision-making?

• Walkthrough

• Tabletop exercise

• Simulation

• Fire drill

Which of the following are key components of SOAR platforms? (Select all that apply)

• Orchestration

• Encryption

• Automation

• Response