ITS Cybersecurity Exam Study Questions and Correct Answers

ITS Cybersecurity Exam Study Questions and Correct Answers You are required to keep track of file access. Which type of auditing should be implemented? - Correct Answer Object Access Object Access - Correct Answer This determines attempts to access files and other objects. Process Tracking - Correct Answer This determines events such as program activation and process exits. Directory Services - Correct Answer This determines whether the operating system generates audit events when an AD DS object is accessed. Audit Logon - Correct Answer This determines whether the operating system generates audit events when a user attempts to log on to the computer. You are part of a cyber forensics team that needs to examine a hard drive for evidence. Your supervisor tells you to first make a duplicate of the hard drive. What is the purpose of making a duplicate of the hard drive? - Correct Answer To preserve the original state of the hard drive. Surveillance cameras are installed around the building perimeter. - Correct Answer Detective control A failed disk is replaced and the backup is restored. - Correct Answer Corrective control New biometric door locks are installed. - Correct Answer Preventive control Which type of attack is directed toward a specific group of users to trick them into visiting an infected website? - Correct Answer Watering hole