Font size
Worksheets3 курс Cybersecurity Compliance Framework & System Administratio
Total questions: 55
Worksheet time: 32mins
Which of the bad guys are described as "They are "in" an organization but are human and make mistakes"?
Inadvertant Actor
Malicious Insiders
Outsiders
Employees
Which is NOT one of the security controls?
Physical
Operational
Testing
Technical
What year did the European Union start enforcing GDPR?
2018
2017
2016
2014
Which three (3) of these obligations are part of the 5 key GDPR obligations?
Consent
Security of Public Data
Accountability of Compliance
Rights of EU Data Subject
Which is the foundational principle that everyone will get during a SOC audit?
Privacy
Availability
Security
Confidentiality
The HIPAA security rule requires covered entites to maintain which two (2) reasonable safeguards for protecting e-PHI?
Physical
Technical
Operational
Informational
HIPAA Administrative safeguards include which two (2) of the following?
Security Personnel
Access Controls
Integrity Controls
Workforce Training and Management
PCI includes 264 requirements grouped under how many main requirements?
5
10
12
20
If you are a mature organization which CIS Controls Implementation Group would you use?
Implementation Group 3
Implementation Group 2
Do not need a controls implementation group due to maturity of my organization
Implementation Group 1
A security attack is defined as which of the following?
All cybersecurity events.
An event that has been reviewed by analysts and deemed worthy of deeper investigation.
An event that has been identified by correlation and analytics tools as a malicious activity.
An event on a system or network detected by a device.
Which order does a typical compliance process follow?
Establish scope, readiness assessment, gap remediation, testing/auditing, management reporting
Readiness assessment, establish scope, testing/auditing, management reporting, gap remediation
Readiness assessment, establish scope, gap remediation, testing/auditing, management reporting
Establish scope, readiness assessment, testing/auditing, management reporting, gap remediation
Under GDPR who determines the purpose and means of processing of personal data?
Data Subject
Controller
Processor
Analyst
Under the International Organization for Standardization (ISO) which standard focuses on Privacy?
ISO 27003
ISO 27017
ISO 27018
ISO 27001
Which SOC report is closest to an ISO report?
Type 1 and Type 2
Type 1
Type 2
Type 3
What is an auditor looking for when they test the control for implementation over an entire offering with no gaps?
Completeness
Timeliness
Consistency
Accuracy
The HIPAA Security Rule requires covered entities to maintain which three (3) reasonable safeguards for protecting e-PHI?
physical
administrative
operational
technical
HIPAA Administrative safeguards include which two (2) of the following?
Security Personnel
Integrity controls
Workforce training and management
Access controls
Who is the governing entity for HIPAA?
US Department of Health and Human Services Office of Civil Rights
Cyber Security and Infrastructure Security Agency (CISA)
US Legislature
Department of Homeland Security
HIPAA Physical safeguards include which two (2) of the following?
Information Access Management
Transmission Security
Workstation and Device Security
Facility Access and Control
PCI uses which three (3) of the following Card Holder Data Environment categories to determine scope?
Processes
People
Technology
Governance
One PCI Requirement is using an approved scanning vendor to scan at what frequency?
Weekly
Monthly
Quarterly
Annually
In which CIS control category will you find Incident Response and Management?
Foundational
Organizational
Basic
Advanced
Which is NOT an example of a client?
Personal Computer
Laptop
Cellphone
e-mail Server
Which three (3) threat key factors should be considered when looking at an Endpoint Security Solution?
user education
detection response
threat hunting
basic operations
A patch is a set of changes to a computer program or its data designed for which three (3) functions?
update
fix
delete
improve
Which two types of updates do most organizations patch as soon as possible after testing?
Critical and Software
Security and Critical
Critical and Service Paks
Security and Service Paks
Which three (3) are common Endpoint attack types?
SQL Injection
Spear Phishing
Whale hunting
Ad Network
Endpoint detection and response includes which three (3) of these key technologies?
Zero-day OS updates.
One-Time patching process.
Continuous monitoring.
Automatic policy creation for endpoints.
Which common endpoint attack is targeted at supply chain infiltration?
Water Hole
Island Hopping
Spear Phishing
Ransomware
What two windows security updates do most organizations always patch?
critical and important
critical and high
important and moderate
high and important
How frequent will most organizations distribute patches?
Monthly
Weekly
Annually
As soon as patches are released
Which three (3) objects are typically managed by active directory?
Local Accounts
Services
Volumes
Network User
Which type of group within Active Directory is used to assign permissions to shared resources?
Distribution groups
Data groups
Service groups
Security groups
Kerberos Authentication provides several benefits including which three (3) of the following?
distributed authentication
interoperability
single sign on
delegated authentication
Which of the nine different kinds of Windows events that can be audited is used to see when someone has shutdown or restarted the computer or when a program tries to do something it does not have permission to do?
Process tracking
System events
Privilege Use
Policy change
True or False: Internal commands are built into the shell program and are shell dependent?
True
False
Which Linux Run Level shuts down all services when the system is being rebooted?
Run Level 0: Halt
Run Level 1: Single User
Run Level 5: Graphical
Run Level 6: Reboot
Which Windows directory folder stores per-user application data and settings?
\Users
\Program Files
\AppData
\System
Which is NOT an example of a default Windows local user account?
HelpAssistant
Network Service
Guest
Administrator
Which feature allows Active Directory to be shared by multiple servers?
A global catalog
A query and index mechanism
A replication services
A Set of rules
Which three (3) of the following steps can be taken to help protect sensitive Windows domain accounts? (Select 3)
Disable the account delegation rights for administrator accounts.
Create dedicated workstation hosts without Internet and email access.
Grant user logon access to servers and workstations.
Separate administrator accounts from user accounts.
What tool can an administrator use to manage servers on private networks that are not connected to the Internet?
Privileged Admin Center
Network Admin Center
Windows Admin Center
AWS Active Directory
Which of the nine different kind of Windows events that can be audited is used to see each instance of a user logging on to and logging off from another computer?
Account management
Account logon
Directory service access
Object access
Which of these commands does not shutdown the Linux operating system?
reboot
grep
shutdown -r
init 6
Which Linux commands are totally shell-independent and usually found in any Linux distribution?
External commands
Internal commands
Which three (3) of the following are common choices of Shell?
Bash
tcsh
sh
Lsh
Which of the cryptography basics ensures authentication, non-repudiation and integrity?
Public key encryption
Hashing
Digital Signatures
Symmetric key encryption
Complete the following statement.
Data can be encrypted_____
at rest only.
in use only.
in transit only.
at rest, in use, and in transit.
Which is NOT a pitfall of encryption?
Implementing a reliable and proven cryptography
Using hardcoded/predictable weak keys
Missing encryption of data and communications
Relying on algorithms being secret
True or False: Internal commands are built into the shell program and are shell dependent.
True
False
True or False: A whole branch of hacking - Reverse Engineering - is devoted to discovering hidden algorithms and data.
True
False
Which is not a key takeaway of best practices of cryptography?
Do encrypt all sensitive data, at rest, in use, and in transit.
Do rely on proven algorithms.
Do use hard to guess keys and store them correctly.
Do rely on your own encryption algorithms.
Which three (3) are true of digital signatures?
Uses symmetric key encryption
Ensures authentication, non-reputiation, and integrity
Uses hashing
Uses public key encryption
What is the recommendation to avoid the encrypting data at rest pitfall "Using hardcoded/easily guessed keys"?
Store keys in secure keystores.
Use a new random initialization vectors every time.
Phase them out
Select cryptographically-random keys, do not reuse keys for different installs.
Which two (2) statements are true of the Hash function?
Maps data of arbitrary size to data of a fixed size.
Hashing makes data easy to reconstruct.
Hashing provides integrity.
