Chapter 8: Becoming a
Cybersecurity Specialist
Questions and Answers
Updated 2026
AnBauditorBisBaskedBtoBassessBtheBLANBofBaBcompanyBforBpotentialBthreats.BWhatBar
eBthreeBpotentialBthreatsBtheBauditorBmayBpointBout?B-
BAnswerBaBmisconfiguredBfirewall
unauthorizedBportBscanningBandBnetworkBprobing
unlockedBaccessBtoBnetworkBequipment
Explanation:
TheBLANBcanBhaveBmanyBendpointBdevicesBconnected.BAnalyzingBbothBtheBnetworkBd
evicesBandBtheBendpointsBconnectedBisBimportantBinBdeterminingBthreats.
AsBpartBofBHRBpolicyBinBaBcompany,BanBindividualBmayBopt-
outBofBhavingBinformationBsharedBwithBanyBthirdBpartyBotherBthanBtheBemployer.BW
hichBlawBprotectsBtheBprivacyBofBpersonalBsharedBinformation?B-BAnswerBGLBA
Explanation:
TheBGramm-Leach-
BlileyBActB(GLBA)BincludesBprivacyBprovisionsBforBindividualsBandBprovidesBopt-
outBmethodsBtoBrestrictBinformationBsharingBwithBthird-partyBfirms.
AsBaBsecurityBprofessional,BthereBisBaBpossibilityBtoBhaveBaccessBtoBsensitiveBdataBan
dBassets.BWhatBisBoneBitemBaBsecurityBprofessionalBshouldBunderstandBinBorderBtoB
makeBinformedBethicalBdecisions?B-BAnswerBlawsBgoverningBtheBdata
Explanation:
, EthicsBinBtheBsecurityBprofessionBareBextremelyBimportantBbecauseBofBtheBsensitivityB
ofBtheBdataBandBassets.BComplianceBtoBgovernmentBandBstateBrequirementsBisBneede
dBinBorderBtoBmakeBgoodBjudgments.
ABsecurityBprofessionalBisBaskedBtoBperformBanBanalysisBofBtheBcurrentBstateBofBaBco
mpanyBnetwork.BWhatBtoolBwouldBtheBsecurityBprofessionalBuseBtoBscanBtheBnetwork
BonlyBforBsecurityBrisks?B-BAnswerBvulnerabilityBscanner
Explanation:
VulnerabilityBscannersBareBcommonlyBusedBtoBscanBforBtheBfollowingBvulnerabilities:
UseBofBdefaultBpasswordsBorBcommonBpasswords
MissingBpatches
OpenBports
MisconfigurationBofBoperatingBsystemsBandBsoftware
ActiveBIPBaddresses
ABconsultantBisBhiredBtoBmakeBrecommendationsBonBmanagingBdeviceBthreatsBinBaBc
ompany.BWhatBareBthreeBgeneralBrecommendationsBthatBcanBbeBmade?B-
BAnswerBDisableBadministrativeBrightsBforBusers.
EnableBautomatedBantivirusBscans.
EnableBscreenBlockout.
Explanation:
WorkstationsBcanBbeBhardenedBbyBremovingBunnecessaryBpermissions,BautomatingBpr
ocesses,BandBturningBonBsecurityBfeatures.
WhatBthreeBservicesBdoesBCERTBprovide?B-
BAnswerBdevelopBtools,Bproducts,BandBmethodsBtoBanalyzeBvulnerabilities
developBtools,Bproducts,BandBmethodsBtoBconductBforensicBexaminations
resolveBsoftwareBvulnerabilities
Cybersecurity Specialist
Questions and Answers
Updated 2026
AnBauditorBisBaskedBtoBassessBtheBLANBofBaBcompanyBforBpotentialBthreats.BWhatBar
eBthreeBpotentialBthreatsBtheBauditorBmayBpointBout?B-
BAnswerBaBmisconfiguredBfirewall
unauthorizedBportBscanningBandBnetworkBprobing
unlockedBaccessBtoBnetworkBequipment
Explanation:
TheBLANBcanBhaveBmanyBendpointBdevicesBconnected.BAnalyzingBbothBtheBnetworkBd
evicesBandBtheBendpointsBconnectedBisBimportantBinBdeterminingBthreats.
AsBpartBofBHRBpolicyBinBaBcompany,BanBindividualBmayBopt-
outBofBhavingBinformationBsharedBwithBanyBthirdBpartyBotherBthanBtheBemployer.BW
hichBlawBprotectsBtheBprivacyBofBpersonalBsharedBinformation?B-BAnswerBGLBA
Explanation:
TheBGramm-Leach-
BlileyBActB(GLBA)BincludesBprivacyBprovisionsBforBindividualsBandBprovidesBopt-
outBmethodsBtoBrestrictBinformationBsharingBwithBthird-partyBfirms.
AsBaBsecurityBprofessional,BthereBisBaBpossibilityBtoBhaveBaccessBtoBsensitiveBdataBan
dBassets.BWhatBisBoneBitemBaBsecurityBprofessionalBshouldBunderstandBinBorderBtoB
makeBinformedBethicalBdecisions?B-BAnswerBlawsBgoverningBtheBdata
Explanation:
, EthicsBinBtheBsecurityBprofessionBareBextremelyBimportantBbecauseBofBtheBsensitivityB
ofBtheBdataBandBassets.BComplianceBtoBgovernmentBandBstateBrequirementsBisBneede
dBinBorderBtoBmakeBgoodBjudgments.
ABsecurityBprofessionalBisBaskedBtoBperformBanBanalysisBofBtheBcurrentBstateBofBaBco
mpanyBnetwork.BWhatBtoolBwouldBtheBsecurityBprofessionalBuseBtoBscanBtheBnetwork
BonlyBforBsecurityBrisks?B-BAnswerBvulnerabilityBscanner
Explanation:
VulnerabilityBscannersBareBcommonlyBusedBtoBscanBforBtheBfollowingBvulnerabilities:
UseBofBdefaultBpasswordsBorBcommonBpasswords
MissingBpatches
OpenBports
MisconfigurationBofBoperatingBsystemsBandBsoftware
ActiveBIPBaddresses
ABconsultantBisBhiredBtoBmakeBrecommendationsBonBmanagingBdeviceBthreatsBinBaBc
ompany.BWhatBareBthreeBgeneralBrecommendationsBthatBcanBbeBmade?B-
BAnswerBDisableBadministrativeBrightsBforBusers.
EnableBautomatedBantivirusBscans.
EnableBscreenBlockout.
Explanation:
WorkstationsBcanBbeBhardenedBbyBremovingBunnecessaryBpermissions,BautomatingBpr
ocesses,BandBturningBonBsecurityBfeatures.
WhatBthreeBservicesBdoesBCERTBprovide?B-
BAnswerBdevelopBtools,Bproducts,BandBmethodsBtoBanalyzeBvulnerabilities
developBtools,Bproducts,BandBmethodsBtoBconductBforensicBexaminations
resolveBsoftwareBvulnerabilities