Quiz_________________?
1) Evaluate New Patch Releases -
Answer✅
-IT evaluates patches released by vendors
-devises plans to implement them
Quiz_________________?
1) Network Based Attacks -
Answer✅
*Use the infrastructure of a network to disrupt operations
-backdoors and trapdoors
-covert channels
-buffer overflows
-denial of service (DoS)
-man in the middle (MITM)
-port scanning
-ransom-wear
-reverse shell
-replay attacks
1
, -return-oriented attacks
-spoofing
-address resolution spoofing (ARS)
Quiz_________________?
1) Processes - COBIT Governance System -
Answer✅
-activities that help achieve IT goals
Quiz_________________?
1) Six Principles for a Governance System -
Answer✅
Very Healthy Dieters Do Try Everything
1) provide shareholder VALUE: balance risk and return
2) HOLISTIC approach: IT can comprise diverse components
3) DYNAMIC Governance System: flexible and changing
4) governance DISTINCT From management
5) TAILORED to enterprise needs: "No such one fits all" governance systems
6) END-TO-END governance system: considering more than just the IT function
Quiz_________________?
2. NIST Privacy Framework -
Answer✅
-framework on data protection
-developed to be industry agnostic
2
, -overlap with NIST Cybersecurity Framework
Quiz_________________?
2) Application-Based Attacks -
Answer✅
-SQL Injection
-Cross Site Scripting (XSS)
-Race Condition
-Mobile Code
Quiz_________________?
2) Organizational Structure - COBIT Governance System -
Answer✅
-decision making entities within organization
Quiz_________________?
2) Three Principles for a Governance Framework -
Answer✅
C - based on CONCEPTUAL MODEL: identify key components and the relationship
between components
F - open and FLEXIBLE: able to change. Add relevant content, remove irrelevant content
that violates COBIT
A - ALIGNED to major standards: framework aligns with other regulations, framework and
standards
3
, Quiz_________________?
2) Use Vulnerability Tool -
Answer✅
-helps organizations track security controls and ID weaknesses on their own so they can ID
patches as needed
Quiz_________________?
3 Types of Disaster Recovery Sites -
Answer✅
-Cold Site: NO equipment in place, 1-3 days, cheapest
-Warm Site: equipment on site but not plugged in, 0-3 days, moderately expensive
-Hot Site: equipment and operations in place. immediately operational, expensive
Quiz_________________?
3) COBIT Core Model - 1 Governance Objective -
Answer✅
EDM: Evaluate, Direct, and Monitor
-evaluate strategic objectives, direct management, monitor if objectives are met
Quiz_________________?
3) COBIT Core Model - 4 Management Objectives -
Answer✅
APO: Align, Plan, and Organize
4
1) Evaluate New Patch Releases -
Answer✅
-IT evaluates patches released by vendors
-devises plans to implement them
Quiz_________________?
1) Network Based Attacks -
Answer✅
*Use the infrastructure of a network to disrupt operations
-backdoors and trapdoors
-covert channels
-buffer overflows
-denial of service (DoS)
-man in the middle (MITM)
-port scanning
-ransom-wear
-reverse shell
-replay attacks
1
, -return-oriented attacks
-spoofing
-address resolution spoofing (ARS)
Quiz_________________?
1) Processes - COBIT Governance System -
Answer✅
-activities that help achieve IT goals
Quiz_________________?
1) Six Principles for a Governance System -
Answer✅
Very Healthy Dieters Do Try Everything
1) provide shareholder VALUE: balance risk and return
2) HOLISTIC approach: IT can comprise diverse components
3) DYNAMIC Governance System: flexible and changing
4) governance DISTINCT From management
5) TAILORED to enterprise needs: "No such one fits all" governance systems
6) END-TO-END governance system: considering more than just the IT function
Quiz_________________?
2. NIST Privacy Framework -
Answer✅
-framework on data protection
-developed to be industry agnostic
2
, -overlap with NIST Cybersecurity Framework
Quiz_________________?
2) Application-Based Attacks -
Answer✅
-SQL Injection
-Cross Site Scripting (XSS)
-Race Condition
-Mobile Code
Quiz_________________?
2) Organizational Structure - COBIT Governance System -
Answer✅
-decision making entities within organization
Quiz_________________?
2) Three Principles for a Governance Framework -
Answer✅
C - based on CONCEPTUAL MODEL: identify key components and the relationship
between components
F - open and FLEXIBLE: able to change. Add relevant content, remove irrelevant content
that violates COBIT
A - ALIGNED to major standards: framework aligns with other regulations, framework and
standards
3
, Quiz_________________?
2) Use Vulnerability Tool -
Answer✅
-helps organizations track security controls and ID weaknesses on their own so they can ID
patches as needed
Quiz_________________?
3 Types of Disaster Recovery Sites -
Answer✅
-Cold Site: NO equipment in place, 1-3 days, cheapest
-Warm Site: equipment on site but not plugged in, 0-3 days, moderately expensive
-Hot Site: equipment and operations in place. immediately operational, expensive
Quiz_________________?
3) COBIT Core Model - 1 Governance Objective -
Answer✅
EDM: Evaluate, Direct, and Monitor
-evaluate strategic objectives, direct management, monitor if objectives are met
Quiz_________________?
3) COBIT Core Model - 4 Management Objectives -
Answer✅
APO: Align, Plan, and Organize
4
