A security professional collaborates with information technology teams to deploy an application that helps identify risks and vulnerabilities. What does this scenario describe?

Which of the following entities may be an internal threat to an organization? Select three answers.

Fill in the blank: Identity theft is the act of stealing _____ to commit fraud while impersonating a victim.

What is regulatory compliance?

Which of the following proficiencies are examples of technical skills? Select two answers.

Fill in the blank: Security _____ and event management (SIEM) tools enable security professionals to identify and analyze threats, risks, and vulnerabilities.

What do security professionals typically do with SIEM tools?

Which of the following threats are examples of malware? Select two answers.

What historical event used a malware attachment to steal user information and passwords?

Fill in the blank: Exploiting human error to gain access to private information is an example of _____ engineering.

A security professional is asked to teach employees how to avoid inadvertently revealing sensitive data. What type of training should they conduct?

Which domain involves defining security goals and objectives, risk mitigation, compliance, business continuity, and the law?

A security professional is optimizing data security by ensuring that effective tools, systems, and processes are in place. Which domain does this scenario describe?

A cybersecurity analyst needs to collect data from multiple places to analyze filtered events and patterns. What type of tool should they use?

Fill in the blank: Security professionals use _____ to help them manage a security incident before, during, and after it has occurred.

A security professional must deactivate user accounts when employees leave the company to remove access to sensitive information and resources. Which domain does this scenario describe?

As a security analyst, you are tasked with auditing your organization's network to identify security related issues. How might a network protocol analyzer (packet sniffer) help you perform this task?

Fill in the blank: A security professional has been tasked with implementing strict password policies on workstations to reduce the risk of password theft. This is an example of _____.

You are helping your security team consider risk when setting up a new software system. Using the CIA triad, you focus on confidentiality, availability, and what else?

Fill in the blank: _____ are items perceived as having value to an organization.

Fill in the blank: Some of the most dangerous threat actors are _____ because they often know where to find sensitive information, can access it, and may have malicious intent.

A security professional is updating software on a coworker’s computer and unexpectedly encounters an email containing private information about another employee. The security professional chooses to follow company guidelines regarding privacy protections and does not share the information with coworkers. Which concept does this scenario describe?

Fill in the blank: The ethical principle of _____ involves safeguarding an organization’s human resources records that contain personal details about employees.

Which of the following describes a set of rules for data protection that are established and enforced by a governing authority?

Fill in the blank: Linux relies on a(n) _____ as the primary user interface.

Fill in the blank: A database is a _____ of organized data stored in a computer system.

Fill in the blank: Security _____ refers to an organization’s ability to manage its defense of critical assets and data, as well as its ability to react to change.

How does business continuity enable an organization to maintain everyday productivity?

A security analyst ensures that employees are able to review only the data they need to do their jobs. Which security domain does this scenario relate to?

Fill in the blank: The software development security domain involves the use of the software development ___, which is an efficient process used by teams to quickly build software products and services.

A business experiences an attack. As a result, its critical business operations are interrupted and it faces regulatory fines. What type of consequence does this scenario describe?

Fill in the blank: In the Risk Management Framework (RMF), the _____ step involves knowing how systems are operating and assessing whether or not those systems support the organization's security goals.

How do organizations use security frameworks to develop an effective security posture?

Fill in the blank: A security professional uses _____ to verify that an employee has permission to access a resource.

Which of the following is an example of biometrics?

You work as a security analyst for a supply chain organization and need to confirm all inventory data is correct, authentic, and reliable. Which core principle of the CIA triad are you using?

A security team has just finished addressing a recent security incident. They now conduct tests to ensure that all of their repairs were successful. Which OWASP principle does this scenario describe?

Fill in the blank: The planning elements of an internal security audit include establishing scope and _____, then conducting a risk assessment.

A security analyst performs an internal security audit. They review their company’s existing assets, then evaluate potential risks to those assets. Which aspect of a security audit does this scenario describe?

Fill in the blank: To assess the performance of a software application, security professionals use _____, including response time, availability, and failure rate.