ISACA Studying Cyber Security Fundamentals
Exam Questions With Correct Answers
Three common controls used to protect availablity.
| | | | | | |
a) redundancy, backups and access control
| | | | |
b. Encryption, file permissions and access controls.
| | | | | |
| c. Access controls, logging and digital signatures.
| | | | | |
d. Hashes, logging and backups. - ANSWER✔✔✔-A. Redundancy,
| | | | | | | | |
backups and access control
| | |
Governance has several goals including:
| | | |
a. providing strategic direction
| | | |
b. ensuring that objectives are achieved
| | | | | |
c. verifying that organizational resources are being used appropriately
| | | | | | | |
d. directing and monitoring security activities.
| | | | | |
e.Ascertaining whether risk is being managed properly - ANSWER✔✔✔-
| | | | | | | |
a. provisioning strategic direction.
| | | |
b. ensuring that objective are achieved
| | | | | |
c. verifying that organizational resources are being used appropriately
| | | | | | | | |
e. Ascertaining whether risk is being managed properly.
| | | | | | |
,Choose 3. According to the NIST framework which of the following are
| | | | | | | | | | | |
considered key functions necessary for the protection of digital assets?
| | | | | | | | | |
a. Encrypt b. Protect c. Investigate d. Recover e. Identify -
| | | | | | | | | | | |
ANSWER✔✔✔-B. Protect |
D.recover |
E. Identify
|
Which of the following is the best definition for cybersecurity?
| | | | | | | | | |
a. The process by which an organization manages cybersecurity risk to
| | | | | | | | | | | |
an acceptable level
| | |
b. The protection of information from unauthorized access or disclosure
| | | | | | | | |
c. The protection of paper documents, digital and intellectual property,
| | | | | | | | | |
and verbal or visual communications d. Protecting information assets by
| | | | | | | | |
|addressing threats to information that is processed, stored or
| | | | | | | | |
transported by interworked information systems - ANSWER✔✔✔-d.
| | | | | | |
Protecting information assets by addressing threats to information that
| | | | | | | | |
is processed, stored or transported by internetworked information
| | | | | | | |
systems.
Which of the following cybersecurity roles is charged with the duty of
| | | | | | | | | | | |
managing incidents and remediation? | | | |
| a. Board of directors
| | |
| b. Executive committee
| |
c. Cybersecurity management
| | |
,d. Cybersecurity practitioner - ANSWER✔✔✔-c. Cybersecurity
| | | | | |
managment
The core duty of cybersecurity is to identify, respond and manage
| | | | | | | | | | |
________ to an organization's digital assets. - ANSWER✔✔✔-Risk
| | | | | | |
A ________ is anything capable of acting against an asset in a manner
| | | | | | | | | | | | |
that can cause harm. - ANSWER✔✔✔-Threat
| | | | |
A _______ is something of value worth protecting. - ANSWER✔✔✔-
| | | | | | | | |
Asset
A _________ is a weakness in the design, implementation, operation or
| | | | | | | | | | |
internal controls in a process that could be exploited to violate the
| | | | | | | | | | | |
system security - ANSWER✔✔✔-vulnerability
| | |
the path or route used to gain access to the target asset is known as a
| | | | | | | | | | | | | | | |
______ - ANSWER✔✔✔-attack vector| | |
In an attack, the container that delivers the exploit to the target is
| | | | | | | | | | | | |
called? - ANSWER✔✔✔-Payload | |
______ communicates required and prohibited activities and behaviors -
| | | | | | | |
ANSWER✔✔✔-Policies
|
, _____ is a class of malware that hides the existence of other malware by
| | | | | | | | | | | | |
modifying the underlying operating system - ANSWER✔✔✔-Rootkit
| | | | | | |
_______ provides details on how to comply with policies and standards.
| | | | | | | | | |
- ANSWER✔✔✔-Procedures
| |
______ contain step-by-step instructions to carry out procedures -
| | | | | | | | |
ANSWER✔✔✔-Guidelines
________ also called malicious code, is software designed to gain access
| | | | | | | | | |
to targeted computer systems. steal info or disrupt computer
| | | | | | | | | |
operations. - ANSWER✔✔✔-Malware | |
_________ are used to interpret policies in specific situations -
| | | | | | | | | |
ANSWER✔✔✔-Standards
____ are solutions to software programming and coding errors -
| | | | | | | | | |
ANSWER✔✔✔-Patches
_______ includes many components such as directory services,
| | | | | | | |
authentication and authorization services, and user management
| | | | | | |
capabilities such as provisioning and deprovisioning - ANSWER✔✔✔-
| | | | | | |
Identity Management |
Exam Questions With Correct Answers
Three common controls used to protect availablity.
| | | | | | |
a) redundancy, backups and access control
| | | | |
b. Encryption, file permissions and access controls.
| | | | | |
| c. Access controls, logging and digital signatures.
| | | | | |
d. Hashes, logging and backups. - ANSWER✔✔✔-A. Redundancy,
| | | | | | | | |
backups and access control
| | |
Governance has several goals including:
| | | |
a. providing strategic direction
| | | |
b. ensuring that objectives are achieved
| | | | | |
c. verifying that organizational resources are being used appropriately
| | | | | | | |
d. directing and monitoring security activities.
| | | | | |
e.Ascertaining whether risk is being managed properly - ANSWER✔✔✔-
| | | | | | | |
a. provisioning strategic direction.
| | | |
b. ensuring that objective are achieved
| | | | | |
c. verifying that organizational resources are being used appropriately
| | | | | | | | |
e. Ascertaining whether risk is being managed properly.
| | | | | | |
,Choose 3. According to the NIST framework which of the following are
| | | | | | | | | | | |
considered key functions necessary for the protection of digital assets?
| | | | | | | | | |
a. Encrypt b. Protect c. Investigate d. Recover e. Identify -
| | | | | | | | | | | |
ANSWER✔✔✔-B. Protect |
D.recover |
E. Identify
|
Which of the following is the best definition for cybersecurity?
| | | | | | | | | |
a. The process by which an organization manages cybersecurity risk to
| | | | | | | | | | | |
an acceptable level
| | |
b. The protection of information from unauthorized access or disclosure
| | | | | | | | |
c. The protection of paper documents, digital and intellectual property,
| | | | | | | | | |
and verbal or visual communications d. Protecting information assets by
| | | | | | | | |
|addressing threats to information that is processed, stored or
| | | | | | | | |
transported by interworked information systems - ANSWER✔✔✔-d.
| | | | | | |
Protecting information assets by addressing threats to information that
| | | | | | | | |
is processed, stored or transported by internetworked information
| | | | | | | |
systems.
Which of the following cybersecurity roles is charged with the duty of
| | | | | | | | | | | |
managing incidents and remediation? | | | |
| a. Board of directors
| | |
| b. Executive committee
| |
c. Cybersecurity management
| | |
,d. Cybersecurity practitioner - ANSWER✔✔✔-c. Cybersecurity
| | | | | |
managment
The core duty of cybersecurity is to identify, respond and manage
| | | | | | | | | | |
________ to an organization's digital assets. - ANSWER✔✔✔-Risk
| | | | | | |
A ________ is anything capable of acting against an asset in a manner
| | | | | | | | | | | | |
that can cause harm. - ANSWER✔✔✔-Threat
| | | | |
A _______ is something of value worth protecting. - ANSWER✔✔✔-
| | | | | | | | |
Asset
A _________ is a weakness in the design, implementation, operation or
| | | | | | | | | | |
internal controls in a process that could be exploited to violate the
| | | | | | | | | | | |
system security - ANSWER✔✔✔-vulnerability
| | |
the path or route used to gain access to the target asset is known as a
| | | | | | | | | | | | | | | |
______ - ANSWER✔✔✔-attack vector| | |
In an attack, the container that delivers the exploit to the target is
| | | | | | | | | | | | |
called? - ANSWER✔✔✔-Payload | |
______ communicates required and prohibited activities and behaviors -
| | | | | | | |
ANSWER✔✔✔-Policies
|
, _____ is a class of malware that hides the existence of other malware by
| | | | | | | | | | | | |
modifying the underlying operating system - ANSWER✔✔✔-Rootkit
| | | | | | |
_______ provides details on how to comply with policies and standards.
| | | | | | | | | |
- ANSWER✔✔✔-Procedures
| |
______ contain step-by-step instructions to carry out procedures -
| | | | | | | | |
ANSWER✔✔✔-Guidelines
________ also called malicious code, is software designed to gain access
| | | | | | | | | |
to targeted computer systems. steal info or disrupt computer
| | | | | | | | | |
operations. - ANSWER✔✔✔-Malware | |
_________ are used to interpret policies in specific situations -
| | | | | | | | | |
ANSWER✔✔✔-Standards
____ are solutions to software programming and coding errors -
| | | | | | | | | |
ANSWER✔✔✔-Patches
_______ includes many components such as directory services,
| | | | | | | |
authentication and authorization services, and user management
| | | | | | |
capabilities such as provisioning and deprovisioning - ANSWER✔✔✔-
| | | | | | |
Identity Management |
