Cybersecurity модуль 2 квиз

Fill in the blank: The _____ domain is focused on access and authorization to keep data secure by making sure that users follow established policies to control and manage assets.

• asset security

• identity and access management

• communication and network security

• security operations

What is the focus of the security and risk management domain?

• Optimize data security by ensuring effective processes are in place

• Define security goals and objectives, risk mitigation, compliance, business continuity, and regulations

• Manage and secure wireless communications

• Secure physical networks and wireless communications

In which domain would a security professional conduct security control testing; collect and analyze data; and perform security audits to monitor for risks, threats, and vulnerabilities?

• Identity and access management

• Security assessment and testing

• Communication and network engineering

• Security architecture and engineering

Fill in the blank: The _____ domain concerns conducting investigations and implementing preventive measures.

• security operations

• communications and networking engineering

• software development security

• asset security

What is a vulnerability?

• Anything that can impact the confidentiality, integrity, or availability of an asset

• A weakness that can be exploited by a threat

• Any circumstance or event that can negatively impact assets

• An organization’s ability to manage its defense of critical assets and data and react to change

Fill in the blank: Information protected by regulations or laws is a _____. If it is compromised, there is likely to be a severe negative impact on an organization’s finances, operations, or reputation.

• new-risk asset

• low-risk asset

• medium-risk asset

• high-risk asset

What are the key impacts of threats, risks, and vulnerabilities? Select three answers.

• Employee retention

• Financial damage

• Identity theft

• Damage to reputation

Fill in the blank: The steps in the Risk Management Framework (RMF) are prepare, _____, select, implement, assess, authorize, and monitor.

• produce

• reflect

• communicate

• categorize

Fill in the blank: Security posture refers to an organization’s ability to react to change and manage its defense of _____ and critical assets.

• data

• consequences

• domains

• gaps

Which of the following examples are key focus areas of the security and risk management domain? Select three answers.

• Follow legal regulations

• Define security goals

• Conduct control testing

• Maintain business continuity