CYBERARK Final Exam Entry-Level
Cybersecurity Training Questions and
Answers 2026-2027 Updated.
Access Control List (ACL) - Answer A mechanism that implements access control for a system
resource by enumerating the identities of the system entities that are permitted to access the
resources
Asset (Information Technology) - Answer Per Wikipedia, an asset in information security is any
data, device, or other component of the environment that supports information-related
activities.
Asymmetric Encryption - Answer Encryption system that uses a public-private key pair for
encryption and/or digital signature.
Attack Flow - Answer There is no official definition from NIST for this term; However, it is a
general term to refer to the flow of an attack from one stage to the next.
In the course, we go over two attack flow models or framworks: Lockheed Martin's Cyber Kill
Chain and the MITRE ATT&CK framework. Both of these models represent the flows that
attackers might follow in a given attack.
Attack Surface - Answer The set of points on the boundary of a system, a system element, or
an environment where an attacker can try to enter, cause an effect on, or extract data from, that
system, system element, or environment.
Authentication - Answer Verifying the identity of a user, process, or device, often as a
prerequisite to allowing access to recourses in an information system.
Availability - Answer Ensuring timely and reliable access to and use of information
Bit - Answer A binary digit having a value of 0 or 1
Broadcast - Answer Transmission to all devices in a network without any acknowledgment by
the receivers
Business Continuity (BC) - Answer Per Wikipedia, business continuity is the capability of an
organization to continued the delivery of products or services at pre-defined acceptable levels
following a disruptive incident.
, Business Impact Analysis (BIA) - Answer An analysis of an information system's requirements,
functions, and interdependencies used to characterize system contingency requirements and
priorities in the event of a significant disruption.
Byte - Answer A group of eight bits that is treated either as a single entity or as an array of 8
individual bits.
Certificate Authority - Answer A trusted entity that issues and revokes public key certificates.
Ciphertext - Answer Data in its encrypted form.
Cloud Computing - Answer A model for enabling ubiquitous, convenient, on-demand network
access to a shared pool of configurable computing resources (eg.. networks, servers, storage,
applications, and services) that can be rapidly provisioned and released with minimal
management effort or service provider interaction.
Common Vulnerabilities and Exposures (CVE) - Answer A dictionary of common names for
publicly known information system vulnerabilities. Each one is given a CVE designator, for
example: CVE-2021-44228 (where 2021 is the year the CVE was identified)
Community Cloud - Answer The cloud infrastructure is provisioned for exclusive use by a
specific community of consumers from organizations that have shared concerns (e.g., mission,
security requirements, policy and, compliance considerations). It may be owned, managed, and
operarted by one or more of the organizations in the community, a third party, or some
combination of them, and it may exist on or off premises.
Compliance - Answer An organization's adherence to governing policies, regulations,
standards, and guidelines.
Confidentiality - Answer The ability to protect data so that unauthorized parties cannot view
the data.
Cryptography - Answer The discipline that embodies the principles, means, and methods for
the transformation of data in order to hide their semantic content, prevent their unauthorized
use, or prevent their undetected modification.
Cyber Kill Chain - Answer Lockheed Martin's attack flow model that includes Reconnaissance,
Weaponization, Delivery, Exploitation, Installation, Command and Control (C2), and Action on
Objectives.
Cybersecurity Training Questions and
Answers 2026-2027 Updated.
Access Control List (ACL) - Answer A mechanism that implements access control for a system
resource by enumerating the identities of the system entities that are permitted to access the
resources
Asset (Information Technology) - Answer Per Wikipedia, an asset in information security is any
data, device, or other component of the environment that supports information-related
activities.
Asymmetric Encryption - Answer Encryption system that uses a public-private key pair for
encryption and/or digital signature.
Attack Flow - Answer There is no official definition from NIST for this term; However, it is a
general term to refer to the flow of an attack from one stage to the next.
In the course, we go over two attack flow models or framworks: Lockheed Martin's Cyber Kill
Chain and the MITRE ATT&CK framework. Both of these models represent the flows that
attackers might follow in a given attack.
Attack Surface - Answer The set of points on the boundary of a system, a system element, or
an environment where an attacker can try to enter, cause an effect on, or extract data from, that
system, system element, or environment.
Authentication - Answer Verifying the identity of a user, process, or device, often as a
prerequisite to allowing access to recourses in an information system.
Availability - Answer Ensuring timely and reliable access to and use of information
Bit - Answer A binary digit having a value of 0 or 1
Broadcast - Answer Transmission to all devices in a network without any acknowledgment by
the receivers
Business Continuity (BC) - Answer Per Wikipedia, business continuity is the capability of an
organization to continued the delivery of products or services at pre-defined acceptable levels
following a disruptive incident.
, Business Impact Analysis (BIA) - Answer An analysis of an information system's requirements,
functions, and interdependencies used to characterize system contingency requirements and
priorities in the event of a significant disruption.
Byte - Answer A group of eight bits that is treated either as a single entity or as an array of 8
individual bits.
Certificate Authority - Answer A trusted entity that issues and revokes public key certificates.
Ciphertext - Answer Data in its encrypted form.
Cloud Computing - Answer A model for enabling ubiquitous, convenient, on-demand network
access to a shared pool of configurable computing resources (eg.. networks, servers, storage,
applications, and services) that can be rapidly provisioned and released with minimal
management effort or service provider interaction.
Common Vulnerabilities and Exposures (CVE) - Answer A dictionary of common names for
publicly known information system vulnerabilities. Each one is given a CVE designator, for
example: CVE-2021-44228 (where 2021 is the year the CVE was identified)
Community Cloud - Answer The cloud infrastructure is provisioned for exclusive use by a
specific community of consumers from organizations that have shared concerns (e.g., mission,
security requirements, policy and, compliance considerations). It may be owned, managed, and
operarted by one or more of the organizations in the community, a third party, or some
combination of them, and it may exist on or off premises.
Compliance - Answer An organization's adherence to governing policies, regulations,
standards, and guidelines.
Confidentiality - Answer The ability to protect data so that unauthorized parties cannot view
the data.
Cryptography - Answer The discipline that embodies the principles, means, and methods for
the transformation of data in order to hide their semantic content, prevent their unauthorized
use, or prevent their undetected modification.
Cyber Kill Chain - Answer Lockheed Martin's attack flow model that includes Reconnaissance,
Weaponization, Delivery, Exploitation, Installation, Command and Control (C2), and Action on
Objectives.
