WGU D488 – Questions With Proper Solutions (A+)
DNS Correct Answer - · Local DNS servers should only accept recursive
queries from local hosts (preferably authenticated local hosts) and not from
the Internet. It is also necessary to implement acc
· Attacks on DNS may also target the server application and/or configuration.
Many DNS services run on BIND (Berkley Internet Name Domain), distributed
by the Internet Software Consortium (isc.org). There are known
vulnerabilities in many versions of the BIND server, so it is critical to patch the
server to the latest version.
· DNS footprinting describes obtaining information about a private network
by querying its DNS server directly by performing a zone transfer (extracting
all the records for a namespace), using a tool such as nslookup or dig.
Risk Management Correct Answer - The cyclical process of identifying,
assessing, analyzing, and responding to risks.
Risk Management Phases Correct Answer - 1. Identification of mission
critical functions
2. Identification of known vulnerabilities
3. Identification of potential threats
4. Analysis of business impacts
5. Identification of risk responses
Single Loss Expectancy (SLE) Correct Answer - The amount that would
be lost in a single occurrence of the risk factor. Another way to think of single
loss expectancy is "the cost of a single event,"
AV x EF
Annual Rate of Occurrence (ARO) Correct Answer - The number of times
in a year that the single loss occurs.
Annual Loss Expectancy (ALE) Correct Answer - · The amount that
would be lost over the course of a year, or the sum-total of all single loss
events over the span of 12 month.
,SLE x ARO
Single Loss Expectancy Components Correct Answer - · Asset Value (AV)
- The value of an asset, such as a server or even an entire building.
· Exposure Factor (EF) - The percentage of the asset value that would be lost.
For example, if a building is exposed to a severe weather event, like a
hurricane, tornado, or earthquake, only part of the building may be lost and
this would be described as its "exposure factor."
Total Cost of Ownership (TCO) Correct Answer - All associated costs of
an asset to include not only purchase (acquisition) costs but also the costs to
maintain and safely operate the asset over its entire lifespan.
Gap Analysis Correct Answer - Measures the difference between current
state and desired state.
Risk Types Correct Answer - Inherent Risk - The level of risk that exists
before any type of mitigation has been implemented.
Residual Risk - Risk that remains even after controls are put into place.
NIST Cybersecurity Framework (CSF) Core Functions Correct Answer - ·
Identify - This function involves the analysis and management of
organizational risks.
· Protect - This function describes the capabilities needed to ensure consistent
operation of all critical business functions and limit the impacts of any adverse
events.
· Detect - This function defines the capabilities needed for the timely discovery
of security incidents.
· Respond - This function seeks to limit the impact of a cybersecurity incident
by defining appropriate actions to be taken upon its discovery
· Recover - This function defines the necessary activities for restoring any
disrupted service to their original, or intended state, following a cybersecurity
incident
,NIST CSF Risk Management Steps Correct Answer - 1. Prioritize and
Scope
2. Orient
3. Create a Current Profile
4. Conduct a Risk Assessment
5. Create a Target Profile
6. Determine, Analyze, and Prioritize Gaps
7. Implement Action Plan
NIST RMF Steps Correct Answer - 1. Prepare
2. Categorize
3. Select
4. Implement
5. Assess
6. Authorize
7. Monitor
COBIT Correct Answer - A framework created and maintained by ISACA,
the Control Objectives for Information and Related Technologies frames IT
risk from the viewpoint of business leadership.
COBIT Components Correct Answer - · Framework
· Process descriptions
· Control objectives
· Management guidelines
· Maturity models
Committee of Sponsoring Organizations of the Treadway Commission (COSO)
Correct Answer - An initiative of five private sector organizations
collaborating on the development of risk management frameworks. The
Enterprise Risk Management — Integrated Framework defines an approach
to managing risk from a strategic leadership point of view.
Risk Register Correct Answer - · Identify - This phase includes the
identification of risk items.
· Assess - This phase analyzes identified risks to determine their associated
level of risk.
, · Control - This phase identifies effective means by which identified risks can
be reduced.
· Review - Each risk item must be periodically re-evaluated to determine if the
risk level has changed and/or if the identified controls are still effective.
Key Performance Indicators (KPI) Correct Answer - A formal mechanism
designed to measure performance of a program against desired goals. It helps
identify the effectiveness of a cybersecurity program by defining the crucial
goals and desired outcomes of the program.
Key Risk Indicators (KRI) Correct Answer - Identify emerging risks and
include the objective of adapting to these identified risks before impacts are
realized.
Tradeoff Analysis Correct Answer - Describes how decisions are made
after reviewing risks and rewards, by comparing potential benefits to
potential risks, and determining a course of action based on adjusting factors
that contribute to each area.
Cloud Service Provider (CSP) Correct Answer - Any third-party
organization providing infrastructure, application and/or storage services via
an "as a service" subscription-based, cloud-centric offering.
Cloud Service Types Correct Answer - · Software as a Service (SaaS) -
Represents the lowest amount of responsibility for the customer as the
facilities, utilities, physical security, platform, and applications are the
responsibility of the provider.
· Platform as a Service (PaaS) - Provides a selection of operating systems that
can be loaded and configured by the customer, the underlying infrastructure,
facilities, utilities, and physical security are the responsibility of the provider.
· Infrastructure as a Service (IaaS) - Provides hardware hosted at a provider
facility using the provider's physical security controls and utilities, such as
power.
Vendor Lock-in vs. Lockout Correct Answer - Vendor Lock-in - Describes
when a customer is completely dependent on a vendor for products or
services because switching is either impossible or would result in substantial
complexity
DNS Correct Answer - · Local DNS servers should only accept recursive
queries from local hosts (preferably authenticated local hosts) and not from
the Internet. It is also necessary to implement acc
· Attacks on DNS may also target the server application and/or configuration.
Many DNS services run on BIND (Berkley Internet Name Domain), distributed
by the Internet Software Consortium (isc.org). There are known
vulnerabilities in many versions of the BIND server, so it is critical to patch the
server to the latest version.
· DNS footprinting describes obtaining information about a private network
by querying its DNS server directly by performing a zone transfer (extracting
all the records for a namespace), using a tool such as nslookup or dig.
Risk Management Correct Answer - The cyclical process of identifying,
assessing, analyzing, and responding to risks.
Risk Management Phases Correct Answer - 1. Identification of mission
critical functions
2. Identification of known vulnerabilities
3. Identification of potential threats
4. Analysis of business impacts
5. Identification of risk responses
Single Loss Expectancy (SLE) Correct Answer - The amount that would
be lost in a single occurrence of the risk factor. Another way to think of single
loss expectancy is "the cost of a single event,"
AV x EF
Annual Rate of Occurrence (ARO) Correct Answer - The number of times
in a year that the single loss occurs.
Annual Loss Expectancy (ALE) Correct Answer - · The amount that
would be lost over the course of a year, or the sum-total of all single loss
events over the span of 12 month.
,SLE x ARO
Single Loss Expectancy Components Correct Answer - · Asset Value (AV)
- The value of an asset, such as a server or even an entire building.
· Exposure Factor (EF) - The percentage of the asset value that would be lost.
For example, if a building is exposed to a severe weather event, like a
hurricane, tornado, or earthquake, only part of the building may be lost and
this would be described as its "exposure factor."
Total Cost of Ownership (TCO) Correct Answer - All associated costs of
an asset to include not only purchase (acquisition) costs but also the costs to
maintain and safely operate the asset over its entire lifespan.
Gap Analysis Correct Answer - Measures the difference between current
state and desired state.
Risk Types Correct Answer - Inherent Risk - The level of risk that exists
before any type of mitigation has been implemented.
Residual Risk - Risk that remains even after controls are put into place.
NIST Cybersecurity Framework (CSF) Core Functions Correct Answer - ·
Identify - This function involves the analysis and management of
organizational risks.
· Protect - This function describes the capabilities needed to ensure consistent
operation of all critical business functions and limit the impacts of any adverse
events.
· Detect - This function defines the capabilities needed for the timely discovery
of security incidents.
· Respond - This function seeks to limit the impact of a cybersecurity incident
by defining appropriate actions to be taken upon its discovery
· Recover - This function defines the necessary activities for restoring any
disrupted service to their original, or intended state, following a cybersecurity
incident
,NIST CSF Risk Management Steps Correct Answer - 1. Prioritize and
Scope
2. Orient
3. Create a Current Profile
4. Conduct a Risk Assessment
5. Create a Target Profile
6. Determine, Analyze, and Prioritize Gaps
7. Implement Action Plan
NIST RMF Steps Correct Answer - 1. Prepare
2. Categorize
3. Select
4. Implement
5. Assess
6. Authorize
7. Monitor
COBIT Correct Answer - A framework created and maintained by ISACA,
the Control Objectives for Information and Related Technologies frames IT
risk from the viewpoint of business leadership.
COBIT Components Correct Answer - · Framework
· Process descriptions
· Control objectives
· Management guidelines
· Maturity models
Committee of Sponsoring Organizations of the Treadway Commission (COSO)
Correct Answer - An initiative of five private sector organizations
collaborating on the development of risk management frameworks. The
Enterprise Risk Management — Integrated Framework defines an approach
to managing risk from a strategic leadership point of view.
Risk Register Correct Answer - · Identify - This phase includes the
identification of risk items.
· Assess - This phase analyzes identified risks to determine their associated
level of risk.
, · Control - This phase identifies effective means by which identified risks can
be reduced.
· Review - Each risk item must be periodically re-evaluated to determine if the
risk level has changed and/or if the identified controls are still effective.
Key Performance Indicators (KPI) Correct Answer - A formal mechanism
designed to measure performance of a program against desired goals. It helps
identify the effectiveness of a cybersecurity program by defining the crucial
goals and desired outcomes of the program.
Key Risk Indicators (KRI) Correct Answer - Identify emerging risks and
include the objective of adapting to these identified risks before impacts are
realized.
Tradeoff Analysis Correct Answer - Describes how decisions are made
after reviewing risks and rewards, by comparing potential benefits to
potential risks, and determining a course of action based on adjusting factors
that contribute to each area.
Cloud Service Provider (CSP) Correct Answer - Any third-party
organization providing infrastructure, application and/or storage services via
an "as a service" subscription-based, cloud-centric offering.
Cloud Service Types Correct Answer - · Software as a Service (SaaS) -
Represents the lowest amount of responsibility for the customer as the
facilities, utilities, physical security, platform, and applications are the
responsibility of the provider.
· Platform as a Service (PaaS) - Provides a selection of operating systems that
can be loaded and configured by the customer, the underlying infrastructure,
facilities, utilities, and physical security are the responsibility of the provider.
· Infrastructure as a Service (IaaS) - Provides hardware hosted at a provider
facility using the provider's physical security controls and utilities, such as
power.
Vendor Lock-in vs. Lockout Correct Answer - Vendor Lock-in - Describes
when a customer is completely dependent on a vendor for products or
services because switching is either impossible or would result in substantial
complexity
