NEW
Font size
WorksheetsCybersecurity and Congress
Total questions: 44
Worksheet time: 22mins
What is identified as a priority for Congress and the Biden administration according to the executive summary?
Economic reform
Cybersecurity
Health care improvement
Education advancement
Which sector is reported to struggle the most with cyberattacks according to the document?
Large enterprises
Small and medium-sized businesses (SMBs)
Non-profit organizations
Government agencies
What is the document suggesting should be emphasized to improve cybersecurity?
Advanced technological development
Basic cybersecurity measures
International cooperation
Military defense strategies
How many pieces of legislation addressing cybersecurity were introduced during 2021?
Over 100
157
75
50
According to the text, what is considered more effective than trying to patch all system vulnerabilities?
Focusing on arresting bad guys
Protecting the "crown jewels" and accepting some level of vulnerability for other assets
Creating a cyber version of the Peace Corps
Sharing information about threats
What can the federal government use its procurement power to do in the cybersecurity market?
To arrest and prosecute cybercriminals
To create a mandatory cybersecurity standard for products and services
To share information about cyber threats
To build a national cyber emergency response team
What is emphasized as a necessary approach to creating the right cybersecurity talent?
Increasing the number of cybersecurity practitioners
Penalizing companies with poor cybersecurity measures
Developing programs that address the cybersecurity workforce gap
Sharing cybersecurity threats publicly
What is essential for information sharing to be effective in cybersecurity?
It must be actionable
It should be kept confidential
It needs to be regulated
It must be punitive
What is the role of Computer Emergency Response Teams (CERTs) in combating cyber actions?
To patch system vulnerabilities
To create cybersecurity standards
To raise the cost of conducting malicious cyber actions
To develop cybersecurity talent
What approach is the Biden administration prioritizing for cybersecurity?
Increasing domestic surveillance
Reducing international cooperation
Implementing a three-pronged approach
Decreasing federal cybersecurity funding
Which office was established by the Fiscal Year (FY) 2021's National Defense Authorization Act (NDAA) to address cybersecurity?
Office of Cybersecurity and Communications
Office of the National Cyber Director (ONCD)
Cybersecurity Infrastructure Security Agency
Bureau for Cyberspace and Digital Policy
Who is responsible for coordinating the federal government's cybersecurity efforts according to the text?
The National Security Council (NSC)
The National Cyber Director
The Department of Homeland Security (DHS)
The Office of the Coordinator for Cyber Issues
What is the new bureau created by the Department of State for dealing with cyberspace and digital policy?
Bureau of Information Resource Management
Bureau for Cyberspace and Digital Policy
Office of Cybersecurity and Communications
Digital Service Bureau
What does the revised cyber social contract emphasize according to the text?
The role of international agencies in cybersecurity
The role of companies in distributing the burden of cyber defense
The reduction of government involvement in cybersecurity
The exclusive responsibility of the government in cybersecurity
What does the National Information Assurance Partnership (NIAP) program offer as a precedent for cybersecurity?
A cybersecurity framework for private-sector organizations
A set of guidelines for patch management
A standard for cybersecurity software in the Department of Defense
A mandatory cybersecurity training for all companies
What was the result of the Wyndham Worldwide Corporation failing to follow proper incident response procedures?
They were given a warning by the Federal Trade Commission
They had to pay for damages exceeding $10.6 million
They lost over 619,000 payment card account numbers
They were required to upgrade their cybersecurity measures
According to the text, what is the role of the private sector in cybersecurity?
To provide enterprise-ready products and services
To solely focus on internal cybersecurity measures
To follow government-imposed cybersecurity frameworks
To outsource all cybersecurity responsibilities
What is the purpose of the Minimum Viable Secure Product (MVSP) announced by companies like Salesforce, Google, and Okta?
To establish a new government cybersecurity agency
To set a minimum security requirement for technology products
To create a new cybersecurity framework for the Department of Defense
To mandate cybersecurity insurance for all businesses
What is a significant challenge faced by Small and Medium-Sized Businesses (SMBs) in implementing cyber hygiene measures?
They have too many resources dedicated to cybersecurity
They often lack both resources and personnel
They are not targeted by cybercriminals
They have the most advanced cybersecurity programs
What is the purpose of creating programs where SMBs receive better terms for loans if they reach a minimum security standard like using MFA?
To increase the overall cybersecurity awareness among SMBs
To provide financial assistance to SMBs without any additional conditions
To prioritize cybersecurity measures in the overall environment
To enforce government regulations on SMBs
Which program offers a range of resources to show companies how to implement basic security measures against cyberattacks?
The Cyber Essentials program
The Cyber Incident Response network
The Cyber Security Centre toolkit
The ICS Cybersecurity Initiative
What is the role of the United Kingdom's National Cyber Security Centre according to the text?
It provides specific advice and resources tailored to organizations with dedicated cybersecurity teams.
It sets the cybersecurity standards for small and medium-sized businesses.
It offers financial incentives for businesses to improve cybersecurity.
It provides a list of trusted cybersecurity vendors.
What is the Cyber Incident Response network's function in the United Kingdom?
It helps organizations prioritize their cybersecurity measures.
It provides a validation process for SMBs to trust their cybersecurity vendors.
It offers help to organizations after cyberattacks.
It creates cybersecurity awareness among SMBs.
What is the significance of protecting "crown jewels" in the context of cybersecurity?
It refers to the prioritization of protecting high-value assets while accepting some level of vulnerability for other systems.
It means implementing the highest level of security for all systems without prioritization.
It is about sharing information about sector trends to identify what needs to be protected.
It involves creating a list of trusted and verified cybersecurity vendors.
Which sectors has the Biden administration developed action plans for in terms of cybersecurity?
Electric, natural gas pipeline, and water sectors
Healthcare, finance, and education sectors
Technology, retail, and transportation sectors
Agriculture, defense, and telecommunications sectors
What is the estimated range for the federal cybersecurity market for FY 2022?
$10 billion to $15 billion
$14.4 billion to $20 billion
$5 billion to $10 billion
$20 billion to $25 billion
Which act, passed in November 2021, includes close to $2 billion for cybersecurity?
The Cybersecurity Enhancement Act
The Infrastructure Investment and Job Act
The Build Back Better Act
The Federal Acquisition Regulation Act
What would the Build Back Better Act provide if passed?
A review of the Federal Acquisition Regulation
Enhanced security and reporting from information technology operations
Additional funding for cybersecurity programs
A standard for Multi-Factor Authentication (MFA) products and services
What is one of the proposed amendments to the Federal Acquisition Regulation (FAR) mentioned in the text?
To decrease the sharing of information about cyber threats and incident information
To increase the sharing of information about cyber threats and incident information
To standardize common cybersecurity contractual requirements across Federal agencies
Both B and C are correct
What is the general perception of the government's relationship with the public and private sectors as expressed by some participants in the roundtables?
Supportive and cooperative
Confrontational, fueling distrust
Indifferent and uninvolved
Transparent and open
What was one of CISA's first actions in response to the Log4Shell software flaw?
Launching a nationwide cybersecurity alert
Convening the JCDC
Implementing a mandatory patch
Increasing cybersecurity funding
What is the estimated number of cybersecurity job openings according to the document?
377,000
597,000
500,000
1,000,000
What is the proposed benefit of a CyberCorps program according to the document?
It would provide cybersecurity training to existing federal employees.
It would allow companies to outsource their cybersecurity needs.
It would help recruit young people into the cybersecurity field.
It would create a new government cybersecurity agency.
According to the document, what percentage of cybersecurity workers self-identify as Hispanic?
4%
9%
24%
40%
What is the ISC(2) report's concern regarding the consequences of the cybersecurity workforce shortage?
Increased risk of software flaws like Log4Shell
Lack of appropriate staff at the enterprise level
Consequences such as misconfigured systems and slow patch cycles
Overreliance on third-party cybersecurity services
What is the primary concern mentioned in the text regarding government-funded programs for cybersecurity talent development?
The programs are too expensive for the government to maintain.
Companies may become reliant on federally funded talent and not build their own cyber operations.
The programs do not include enough practical training exercises.
There is a lack of interest from the private sector in these programs.
According to the U.S. Cyberspace Solarium Commission report, what is recommended to incentivize better cybersecurity practices?
Increasing the number of cybersecurity drills.
Tying insurance coverage to the implementation of better cybersecurity practices.
Mandating cybersecurity training for all employees in critical infrastructure entities.
Offering tax incentives for companies that invest in cybersecurity.
What was the outcome of the NotPetya malware incident in terms of insurance coverage?
Insurance companies covered the full cost of the damages caused by the malware.
The incident fell under the "hostile/warlike action exclusion" in December 2021, leading to a denial of coverage.
All companies affected by NotPetya received compensation without any exclusions.
The insurance companies went bankrupt due to the high payouts for the damages.
What is the purpose of Section 1550 of the FY 2022 NDAA as mentioned in the text?
To provide financial aid to companies affected by cyber attacks.
To establish a voluntary process for companies to share information with Cyber Command.
To create a new cybersecurity insurance policy for private companies.
To mandate cybersecurity training for all government employees.
What initiative did CISA launch in October 2021 to facilitate operational planning and collaborative analysis?
Log4j vulnerability masks
JCDC
CERT partnerships
Threat intelligence information-sharing guide
According to the text, what is one of the challenges in cybersecurity information sharing?
Determining the cost of information sharing
Deciding which private companies should receive government data
Determining who should integrate the data and who should participate
Ensuring that all companies share their information publicly
What is the primary reason for limiting the number of participants in a cybersecurity information sharing program?
To reduce the complexity of the program
To maintain effectiveness and boost capabilities
To prevent private companies from gaining too much insight
To ensure that only government agencies are involved
Which country's National Cybersecurity Center implemented a cyber attack threat intelligence information-sharing guide?
United States
United Kingdom
Canada
Australia
What is emphasized as a key part of the foreign policy agenda in relation to cybersecurity?
Reducing the number of cybersecurity incidents
Implementing international norms for cybersecurity
Privatizing cybersecurity efforts
Focusing solely on domestic cybersecurity issues
