A contractor accidentally sends a confidential customer report to the wrong vendor because they misunderstood the new email policy. Which type of insider threat does this scenario represent?

Organized crime is motivated by which of the following?

An attacker calls a help desk pretending to be a new employee who “lost VPN access.” They provide a fake employee ID and use urgency to pressure the technician into resetting the account.

A security team wants to evaluate all ways an attacker could exploit vulnerabilities in their environment, including door access, cloud services, and employees. Which concept are they analyzing?

A user finds a USB drive in the parking lot labeled “Executive Salaries.” When plugged in, a malicious script auto-executes. Which type of vector is being used?

A CFO receives a fraudulent email that appears to come from the CEO asking for an emergency wire transfer. Which targeted phishing technique is this?

Attackers register the domain “micr0soft-support.com” to make phishing emails look credible. Which technique does this describe?

A threat group compromises a small third-party vendor that provides HVAC monitoring software to a large corporation. Through the vendor’s remote access, the attackers infiltrate the corporation’s main network. This scenario BEST illustrates which concept?

A user receives a fraudulent text message claiming their bank account is locked and requesting they click a malicious link. Which type of attack is this?

A security team receives an alert about a newly discovered zero-day vulnerability affecting their firewall appliance. They immediately perform a focused evaluation of how this vulnerability might impact them. What type of risk assessment is being conducted?

Which of the following BEST describes the purpose of a risk register?

A server valued at $80,000 would lose 25% of its value if a breach occurs. The incident is expected to occur twice per year. What is the Annualized Loss Expectancy (ALE)?

An organization wants to measure the level of risk before applying any security controls or mitigation. Which type of risk is this?

A company determines that the cost of implementing a control is higher than the financial impact of the risk itself. They decide not to implement any mitigation.

A database server outage would stop the business from processing orders. Management determines the system must be restored within 6 hours, and workers need 2 additional hours afterward to re-validate data. What is the Work Recovery Time (WRT)?

A company wants to ensure a vendor will meet uptime guarantees for a new SaaS product. Which document should the company review?

A company requires an independent organization to verify the accuracy and reliability of security controls implemented by a cloud provider. Which type of assessment is this?

An organization frequently invests in high-profit, high-risk ventures and prioritizes growth over stability. Which risk appetite category does it MOST likely fall into?

A server experiences failures several times per year but is repaired quickly each time. Engineers want to understand how long the server typically stays operational between failures. Which metric provides this information?

A security analyst discovers that attackers gained access to a server and were able to dump the contents of RAM, exposing sensitive customer information. This scenario involves which state of data?

Which of the following BEST describes the primary function of a Data Loss Prevention (DLP) solution?

A developer sends an encrypted file containing client records to the backup team. The file cannot be read without the organization’s decryption tool. This file is considered:

A company labels customer Social Security Numbers (SSNs) as information that could cause harm if exposed, influencing hiring decisions or financial outcomes. This classification BEST fits:

Which of the following restricts processing and storage of data to specific geographic regions?

Which GDPR role determines why and how personal data is processed?

A customer contacts an organization and requests that all their personal data be completely removed because they no longer use the company’s services. This request refers to which GDPR principle?

An attacker compromises an HR database and reads employee tax documents, but does not alter or delete anything. Which statement BEST describes this incident?

An organization installs software that blocks employees from sending confidential engineering documents to personal email addresses. Which type of policy does this MOST likely support?

A company launches a program that includes phishing simulations, job-role-specific training, and continuous updates based on new threat trends. This approach BEST aligns with:

Which document outlines the specific responsibilities and expectations between two organizations collaborating on a joint project?

A company wants to reduce the likelihood of employees accidentally sharing sensitive information via instant messaging platforms. Which security control would BEST address this concern?

After a risk assessment, an organization decides to purchase cyber insurance to cover potential financial losses from data breaches. Which risk management strategy is this?

An organization prefers to avoid risks that could disrupt its core business operations, even if it means missing out on potential growth opportunities. Which risk appetite category does this BEST describe?

After identifying a risk, a company implements additional firewalls and monitoring tools to reduce the likelihood of a successful cyberattack. Which risk management strategy is being used?