What type of Risk Response aligns with purchasing cybersecurity insurance?

Gaining unauthorized access into a company's network is considered a (blank).

What type of Compensating Control refers to day-to-day procedures that maintain security?

Which Security Control is used to identify and alert on security incidents as they happen?

Footprinting or Fingerprinting? Gathering open-source information about a target system or network to identify potential vulnerabilities.

Footprinting or Fingerprinting? Determining the specific details of the target system, such as the OS and application versions, to understand its configuration and potential weaknesses.

Penetration Testing or Adversary Emulation? Mimicking/replicating the TTPs of actual, real-world attackers to test an organization's defenses.

Which is the correct order of the Patching & Configuration Management Process?

What is the term that describes a scheduled timeframe when technicians would perform a backup generator test?

True or False? Patching tools are often cross-platform compatible, meaning you do not need separate patching tools for Windows, Linux, macOS, etc.

This term describes a specific, measurable target that defines the level of service expected from our coworkers for a particular aspect, such as an uptime rate of 99.99%.

This term describes raising issues to higher authorities or more senior staff members when necessary.

This term describes a monetary incentive for ethical hackers to find and report vulnerabilities in an organization's systems or software.

This strategic framework for understanding and preventing cyberattacks was developed by Lockheed Martin, and is a structured approach to breaking down the stages of an attack.

This intrusion analysis framework focuses on the Adversary, Capability, Victim & Infrastructure.

This framework is a comprehensive knowledge base that contains the tactics and techniques of actual cyber adversaries and real-world attacks that happened in the past.

True or False? The Open-Source Security Testing Methodology Manual (OSS TMM) is a manual that you can download to help you with security assessments.

True or False? A user that unintentionally clicked on a fraudulent URL in an email is known as an Insider Threat

This term refers to the part of the internet that is not indexed (not searchable), such as a password-protected website.

True or False? The Information Sharing and Analysis Centers (ISACs) are non-profit organizations that provide a central resource for gathering and sharing information on cyber threats that affect the nation's critical infrastructure.

What metric helps rank or score threat intelligence to indicate the reliability, timeliness and relevance of the data?

Is a Honeypot a form of active or passive defense?

Which is the correct order of the Cyber Incident Response Cycle?

Considering Digital Forensics, what term describes detailed, real-time records taken by forensic examiners that document every step of the examination process, including observations, actions taken, and any findings?

If I want to see guidelines for more than 100 secure configurations for 25+ vendor products families, where would I want to look?

True or False? Unlike containers, multiple VMs share the host OS, making them more lightweight and faster to start.

Which type of Hypervisor is known as a "bare metal" device (one big BEEFY server)?

Which Cloud Deployment Model states that the CSP handles the most responsibility?

What is the term to describe a shift in mindset that no longer relies solely on a secure network boundary, but focuses on Zero Trust?

Which Logging Level is more severe: WARN or ERROR

Which security mechanism controls and monitors access to accounts that have elevated permissions?

Which of the following accurately describes penetration testing?

Penetration testing involves:

A security team investigates a cyberattack on a hospital’s electronic health record (EHR) system. The incident reveals that an attacker gained unauthorized access, exfiltrated sensitive patient data, modified medical records, and then deployed ransomware that locked all user access to the system.

Which security principle(s) has/have been violated?

A security analyst is investigating an anomalous spike in outbound traffic from a database server. Further analysis reveals that an attacker exploited a misconfigured application to escalate privileges, extract sensitive customer data, and exfiltrate it using an encrypted tunnel. The attack was undetected for several days despite SIEM monitoring.

Which of the following is the MOST critical security control that could have mitigated this attack?