Lamar University MISY 5325: Cybersecurity Management Midterm Exam
|| Most Recent Exam 2026|2027 Actual Complete Real Exam Questions
And Correct Answers (Verified Answers) Already Graded A+ |
Guaranteed Success! Newest Exam | Just Released!!
Which of the following best describes a cybersecurity risk?
A. The possibility that a threat will exploit a vulnerability and cause
harm
B. A software application used to encrypt data
C. A documented employee job description
D. A backup copy of organizational data
Answer: A. The possibility that a threat will exploit a vulnerability and
cause harm
Rationale: Cybersecurity risk represents the potential for loss or
adverse impact when a threat exploits a vulnerability. Effective risk
management identifies these conditions and determines how the
organization should address them.
Which term describes a weakness that could be exploited by a threat?
A. Vulnerability
B. Asset
C. Control
D. Safeguard
Answer: A. Vulnerability
,Rationale: A vulnerability is a weakness in technology, processes,
configurations, or human behavior that can be exploited. Identifying
vulnerabilities is an important component of cybersecurity risk
assessment.
What is the primary purpose of threat identification?
A. To create a list of potential threats facing an organization
B. To eliminate every possible cybersecurity threat
C. To replace all organizational security policies
D. To calculate employee salaries
Answer: A. To create a list of potential threats facing an organization
Rationale: Threat identification establishes what potentially harmful
events or actors could affect organizational assets. This information
provides a foundation for subsequent risk analysis and mitigation.
Which type of threat involves deliberate hostile actions against an
organization?
A. Intentional threat
B. Environmental threat
C. Accidental threat
D. Administrative threat
Answer: A. Intentional threat
Rationale: Intentional threats result from deliberate actions intended
to compromise confidentiality, integrity, availability, or other
organizational objectives. Examples include deliberate malware
deployment, unauthorized access, and sabotage.
,Which of the following is the best example of a vulnerability?
A. An unpatched operating system
B. A security administrator
C. A firewall policy
D. An encrypted database
Answer: A. An unpatched operating system
Rationale: An unpatched operating system may contain known
weaknesses that attackers can exploit. The unpatched condition is the
vulnerability; an attacker exploiting it would represent the threat
event.
Which statement best distinguishes a threat from a vulnerability?
A. A threat is a potential cause of harm, whereas a vulnerability is a
weakness that can be exploited
B. A threat is always software, whereas a vulnerability is always
hardware
C. A vulnerability causes harm, whereas a threat prevents harm
D. Threats and vulnerabilities are identical concepts
Answer: A. A threat is a potential cause of harm, whereas a
vulnerability is a weakness that can be exploited
Rationale: Threats represent potential sources or events that can cause
harm. Vulnerabilities are weaknesses that create opportunities for
threats to succeed.
What is an asset in cybersecurity management?
A. Something valuable to an organization that requires protection
, B. Only a physical computer
C. Only a network firewall
D. A type of malware
Answer: A. Something valuable to an organization that requires
protection
Rationale: Assets include information, systems, applications,
hardware, services, personnel, facilities, and other resources that have
organizational value. Cybersecurity management determines which
assets need protection and why.
Why is asset identification important in risk management?
A. It establishes what the organization needs to protect
B. It eliminates the need for risk assessment
C. It guarantees that attacks cannot occur
D. It replaces incident response procedures
Answer: A. It establishes what the organization needs to protect
Rationale: An organization cannot effectively protect resources it has
not identified. Asset identification provides the foundation for
determining threats, vulnerabilities, impacts, and appropriate security
controls.
Which security objective protects information from unauthorized
disclosure?
A. Confidentiality
B. Integrity
C. Availability
|| Most Recent Exam 2026|2027 Actual Complete Real Exam Questions
And Correct Answers (Verified Answers) Already Graded A+ |
Guaranteed Success! Newest Exam | Just Released!!
Which of the following best describes a cybersecurity risk?
A. The possibility that a threat will exploit a vulnerability and cause
harm
B. A software application used to encrypt data
C. A documented employee job description
D. A backup copy of organizational data
Answer: A. The possibility that a threat will exploit a vulnerability and
cause harm
Rationale: Cybersecurity risk represents the potential for loss or
adverse impact when a threat exploits a vulnerability. Effective risk
management identifies these conditions and determines how the
organization should address them.
Which term describes a weakness that could be exploited by a threat?
A. Vulnerability
B. Asset
C. Control
D. Safeguard
Answer: A. Vulnerability
,Rationale: A vulnerability is a weakness in technology, processes,
configurations, or human behavior that can be exploited. Identifying
vulnerabilities is an important component of cybersecurity risk
assessment.
What is the primary purpose of threat identification?
A. To create a list of potential threats facing an organization
B. To eliminate every possible cybersecurity threat
C. To replace all organizational security policies
D. To calculate employee salaries
Answer: A. To create a list of potential threats facing an organization
Rationale: Threat identification establishes what potentially harmful
events or actors could affect organizational assets. This information
provides a foundation for subsequent risk analysis and mitigation.
Which type of threat involves deliberate hostile actions against an
organization?
A. Intentional threat
B. Environmental threat
C. Accidental threat
D. Administrative threat
Answer: A. Intentional threat
Rationale: Intentional threats result from deliberate actions intended
to compromise confidentiality, integrity, availability, or other
organizational objectives. Examples include deliberate malware
deployment, unauthorized access, and sabotage.
,Which of the following is the best example of a vulnerability?
A. An unpatched operating system
B. A security administrator
C. A firewall policy
D. An encrypted database
Answer: A. An unpatched operating system
Rationale: An unpatched operating system may contain known
weaknesses that attackers can exploit. The unpatched condition is the
vulnerability; an attacker exploiting it would represent the threat
event.
Which statement best distinguishes a threat from a vulnerability?
A. A threat is a potential cause of harm, whereas a vulnerability is a
weakness that can be exploited
B. A threat is always software, whereas a vulnerability is always
hardware
C. A vulnerability causes harm, whereas a threat prevents harm
D. Threats and vulnerabilities are identical concepts
Answer: A. A threat is a potential cause of harm, whereas a
vulnerability is a weakness that can be exploited
Rationale: Threats represent potential sources or events that can cause
harm. Vulnerabilities are weaknesses that create opportunities for
threats to succeed.
What is an asset in cybersecurity management?
A. Something valuable to an organization that requires protection
, B. Only a physical computer
C. Only a network firewall
D. A type of malware
Answer: A. Something valuable to an organization that requires
protection
Rationale: Assets include information, systems, applications,
hardware, services, personnel, facilities, and other resources that have
organizational value. Cybersecurity management determines which
assets need protection and why.
Why is asset identification important in risk management?
A. It establishes what the organization needs to protect
B. It eliminates the need for risk assessment
C. It guarantees that attacks cannot occur
D. It replaces incident response procedures
Answer: A. It establishes what the organization needs to protect
Rationale: An organization cannot effectively protect resources it has
not identified. Asset identification provides the foundation for
determining threats, vulnerabilities, impacts, and appropriate security
controls.
Which security objective protects information from unauthorized
disclosure?
A. Confidentiality
B. Integrity
C. Availability
