CK Cyber 2 - LO1.1.D

What is one of the key responsibilities of cybersecurity professionals when handling sensitive information?

• Ignoring ethical principles if the information is not legally protected

• Following ethical principles established by professional cybersecurity organizations

• Sharing sensitive information with trusted colleagues

• Storing sensitive information in unsecured locations

Which of the following is NOT a characteristic of a proactive cybersecurity professional?

• Swift in responding to threats

• Thorough in protecting systems

• Reactive to cybersecurity incidents

• Proactive in identifying potential risks

What is the role of the National Institute of Standards and Technology (NIST) in cybersecurity?

• To develop software for cybersecurity

• To manage, reduce, and communicate cybersecurity risks

• To enforce cybersecurity laws

• To provide cybersecurity training to individuals

Which phase of the NIST Cybersecurity Framework involves determining the current cybersecurity risk to an organization?

• Protect

• Detect

• Identify

• Respond

In the NIST Cybersecurity Framework, what is the main goal of the protect phase?

• To identify cybersecurity risks

• To implement safeguards to prevent or reduce cybersecurity risk

• To analyze potential threats

• To recover from cybersecurity incidents

Which of the following is NOT one of the six iterative phases outlined by the NIST Cybersecurity Framework?

• Identify

• Protect

• Detect

• Eliminate

Why is it important for cybersecurity professionals to be thorough in their approach?

• To ensure they can work independently

• To guarantee complete elimination of all risks

• To effectively protect systems and data from potential threats

• To reduce the need for regular system updates

What is the primary focus of the detect phase in the NIST Cybersecurity Framework?

• To implement security measures

• To analyze possible threats and vulnerabilities

• To recover from security breaches

• To communicate security policies

Which of the following best describes the ethical obligation of cybersecurity professionals?

• To prioritize legal requirements over ethical principles

• To follow ethical principles only when convenient

• To adhere to ethical principles regardless of legal protection

• To focus solely on technical skills

What is the significance of the NIST Cybersecurity Framework for organizations?

• It provides a legal mandate for cybersecurity practices

• It offers a structured approach to managing cybersecurity risks

• It replaces the need for cybersecurity professionals

• It focuses on financial management of cybersecurity