How are organizations safeguarding their resources with the virtual shift following the COVID-19 pandemic? Select all that apply.

State True or False
National Security Decision Directives (NSDD 145) was America’s first national policy on telecommunication and automated information systems security.

The history of cybersecurity dates back several decades. When did the first computer worm, Creeper, emerge?

Which concept encourages software and system developers to integrate security features at the start of the development cycle?

Which of the following illustrates the application of critical thinking in cybersecurity?

According to the critical thinking model, what skills do you require to effectively perform particular tasks or functions within cybersecurity?

If you are a Human Resource Manager conducting interviews for a cybersecurity analyst position, what specific competencies will you look for in candidates to assess their interpersonal skills?

Imagine you are a data analyst researching customer behavior for a marketing campaign. When evaluating data, what should you do if the data does not support the hypothesis?

How does critical thinking empower cybersecurity professionals? Select all that apply.

The WarGames movie prompted US President Ronald Reagan to _______________.

As a privacy advocate, you’re investigating the implications of the recent legislation on government surveillance practices. Which law or agency significantly broadened the state’s surveillance capabilities?

What is one of the primary impacts of COVID-19 on the global approach to cybersecurity?

When was the term “ethical hacking” coined?

As a cybersecurity analyst at TechEase Securities, you received an email from an unknown sender claiming to be from your company’s IT department. The email requests that you urgently click a link to verify your account information due to alleged suspicious activity. How would you apply critical thinking in this situation?

A cybersecurity professional comes across an online article warning about a critical vulnerability in popular software and urging immediate patching. How can they use critical thinking to determine the best course of action?

What skills will help a cybersecurity manager convince the executive team to allocate more resources for cybersecurity initiatives despite budget constraints?

How does objectivity enhance critical thinking for cybersecurity professionals?

The IT department recently implemented a multifactor authentication (MFA) system for all employee logins and assumes this system has eliminated the risk of unauthorized access. How can a cybersecurity analyst leverage critical thinking to ensure the company’s security remains robust?

When Emily, a cybersecurity manager, empathizes with different stakeholders to gain alternate perspectives on a security issue, which critical thinking skill is she using?

Which of the following threat actors are driven by political or social agendas?

Which insider threat occurs out of malice, grievance, or financial incentives?

Which of the following is an example of an action carried out by a negligent insider?

The IBM X-Force Threat Intelligence Index is designed to _______________.

According to Jeff Crume, which technology can simulate an individual’s voice, image, and likeness on a mobile phone?

Which of the following is a recommended measure for preventing malware attacks?

What is the term used to describe automated software that performs malicious tasks over the internet?

Why is regular data backup important for cybersecurity?

How can you enhance account security beyond just using a password?

What does “https://” signify in a website’s URL?

Which solution aims to inform users about the possibility of spear-phishing attacks?

A cybersecurity specialist at a financial institution is tasked with finding ways to protect the company's executives from potential deep fake call scams. Which solution is most effective in addressing the issue? [Select two]

What is whaling?

As an IT manager in a corporate setting, you are responsible for safeguarding the company's network against cybersecurity threats. What solution would you implement to ensure the software is regularly updated to mitigate phishing attacks?

What is Vishing?

You are a cybersecurity analyst investigating a series of cyberattacks targeting critical infrastructure. You discover that a government entity sponsored the attacker. How would you categorize this threat actor?

A marketing manager at a clothing company accidentally leaves a document containing upcoming product designs on a public printer. A competitor’s employee later finds this document. What type of insider threat does this scenario represent?

The product team is developing an AI assistant that will recommend purchases and answer customer queries on products. Why is it crucial to be aware of potential hallucinations?

As an engineering student who frequently communicates with peers through emails, what steps will you take to safeguard your system against malware?

While conducting malware analysis, you come across a suspicious program disguised as a legitimate application. What type of malware could this be?

Jane, an IT security analyst tasked with enhancing her company’s cybersecurity measures, is evaluating various strategies to detect and prevent malware attacks. Which preventive measure detects new, previously unknown malware by analyzing patterns and behaviors akin to known threats?

What is the primary purpose of Quad9?

Imagine you’re a cybersecurity analyst tasked with ensuring the security of your company’s Linux-based servers. Which tool would you use to mitigate malware attacks?

John, a delivery boy, needs to hand over a package at a secure facility. As he approaches the building, he notices an employee leaving. John strategically positions himself near the door and requests the employee to hold it open for him, pretending to struggle with a package. Which category of social engineering does this breach fall under?

Emma just got a new phone number. Shortly afterward, she receives a text message that warns of a potential service interruption and instructs her to click a link to update her account details. The message uses informal language and does not address Emma by name. What type of phishing attack is Emma most likely experiencing?

You’re responsible for enhancing security measures in a server room housing critical data and infrastructure. Which physical control measure will you implement to stop security breaches before they occur?

Which security measure should you use to regulate who can view or utilize resources within a computing system?

You work at an organization where employees regularly access sensitive data through various devices. They are concerned about cybersecurity threats and approach you for advice on securing their endpoints. Which of the following components is typically included in comprehensive endpoint security solutions?

When should recurrent vulnerability scans ideally be scheduled to minimize disruption to the organization’s operations?

During the detection and analysis phase, the incident response (IR) team identifies a ransomware attack on a critical server. What immediate action must the team take to address this situation?

How does Wireshark offer visibility into specific network traffic details?

An IT professional implements additional verification methods like multifactor authentication (MFA) to protect their network against unauthorized packet sniffing. What security strategy is the IT professional using?

True or False:

Passive sniffing involves manipulating network traffic to intercept data packets.

What are the primary objectives of ingress filtering? Select two.

You are a database administrator investigating a recent security breach that may have involved a structured query language (SQL) injection attack. Which consequence of an SQL injection attack involves manipulating access permissions in a database?

What is the primary objective of attackers using advanced persistent threats (APTs) in a cyberattack?

The primary purpose of packet sniffing is to ________________.

Imagine you’re on a familiar e-commerce website you’ve used securely before. While entering your contact details during checkout, you notice unusual text within the address field, like extra letters or symbols you didn’t type. What kind of attack could this be?

Imagine you’re a security manager at a financial company. Recently, employees have been using personal email accounts for business communications, violating the company’s security policies. What type of controls should you implement to effectively discourage employees from using insecure methods for business communications?

Why is encryption considered one of the most secure ways to ensure data confidentiality?

You are developing a banking application where users can input their financial data. How would you explain the use of input validation to ensure the security of sensitive information stored within the application’s database?

Which application security testing technique inspects the source code without executing the program?

A large corporation with robust cybersecurity measures in place experiences a data breach caused by a phishing attack. The company activates its incident response (IR) team to contain the damage. What role will digital forensics play in the detection and analysis stage?

Employees at a large financial organization are seeing unusual pop-up windows redirecting them to unfamiliar websites while working remotely. What type of security breach is the organization experiencing?

Why do cybersecurity professionals combine security information and event management (SIEM) systems with security orchestration, automation, and response (SOAR) platforms?

As an IT consultant in a multinational organization, you manage user accounts on the company’s network, from account creation to deletion. Which identity and access management (IAM) component does this task fall under?

You are a cybersecurity specialist implementing multifactor authentication (MFA) for your employees. What solution will you deploy for users to verify login attempts by approving notifications sent to their devices through an application?

File access controls allow administrators to delegate authority to users, enabling them to dictate access permissions to various resources. Which file access control enables users to view file contents?

An IT company wants to improve its security system. How can it establish digital identities and implement secure authentication using innovative access control methods?

What is the main advantage of Fast IDentity Online (FIDO) over traditional passwords?

An unauthorized individual manages to access sensitive information that the organization has discarded. What kind of security threat is the organization facing?

You are a facilities manager tasked with enhancing the outdoor security measures of a high-profile government facility located in a densely populated area. What measure will you take to diminish the visibility of the infrastructure?

What outdoor security measure will you implement to discourage unauthorized access and guide behavior to ensure safety and protection for everyone in an office building?

How can low temperatures impact an organization’s cybersecurity and physical infrastructure?

You share workspace with colleagues from different departments. How can you limit the viewing angle and prevent visual hacking?

You are responsible for managing user accounts and access permissions. Which of the following actions involves verifying if a staff member has the required permissions to do the action they are attempting?

You’re a security consultant evaluating access control measures for your organization’s high-security research lab. Which authentication method involving unique behavioral and physical characteristics would you choose?

As a systems administrator in the military, you oversee file permissions management. Which access control scheme should you use to ensure users cannot alter file access permissions or modify established security protocols?

Which access control method is equipped with chips to store credentials and perform cryptographic operations securely?

Ann, a software engineer, wants to implement multifactor authentication (MFA) to enhance system security. What factors should she consider integrating?

Roy, a former employee, visits the organization to collect his settlement papers. He enters the building with a concealed camera on his backpack. What type of security threat does this action pose?

Which of the following is an example of human vigilance?

Your organization is facing operational delays because of frequent power disruptions. How can you address this issue?

In a government research laboratory, alarms are triggered whenever cattle graze close to the building walls, creating chaos. What security measures should be implemented to distinguish between harmless entities and potential threats?

What outdoor security measure should you install to maintain a record of all entries and enable efficient permissions management?