A company recently added motion-activated cameras and badge readers at all entrances. The IT director explains these are meant to discourage intruders before they reach the server room. What type of control and function best describe these new measures?

After a malware outbreak, the IT team restores servers from clean backups and patches all systems. Which functional control type is the team performing?

During an ongoing phishing campaign, analysts in the Security Operations Center (SOC) detect new malicious domains. They immediately alert developers through the DevSecOps channel so code repositories can block the URLs. Which business units are working together to maintain security resilience in this scenario?

A mid-level accountant in a company’s finance department begins emailing confidential client data to a competitor. The employee had legitimate access to the files as part of their daily duties. Which type of threat actor does this scenario describe?

A company uses multiple cloud applications and remote access tools for employees. A penetration test shows that default admin passwords and open ports on several cloud servers could be exploited by attackers. Which two components of the organization’s security posture are being described?

A company receives reports that several employees found USB drives in the parking lot labeled “Confidential Salaries.” When inserted, the drives executed malicious scripts that gave attackers remote access to the company network. Which type of attack method was used?

A threat actor calls a company’s help desk claiming to be a senior executive who urgently needs access to an internal file. The attacker uses a confident tone and insists on bypassing standard verification procedures. Which social engineering techniques are being used in this scenario?

A cybersecurity firm discovers that an attack campaign has been slowly stealing data from government networks for over a year. The malware is custom-built, uses multiple zero-day exploits, and operates through compromised third-party servers. Which type of threat actor is most likely responsible?

After a ransomware attack, the IT department isolates affected systems and notifies the incident response team. The legal department is also informed to assess regulatory obligations. Which business units are collaborating to address the incident?

Security analysts discover a sophisticated cyberattack targeting a critical infrastructure provider. The attackers use advanced evasion techniques and have access to significant resources. Which type of threat actor is most likely behind this attack?

A company installs biometric scanners and security guards at the entrance to its data center. These measures are intended to prevent unauthorized physical access. What type of control and function do these measures represent?