COMPUTER SCIENCE (ISC)2 CERTIFIED IN
CYBERSECURITY - EXAM PREP
Document specific requirements C) SLR (Service-Level Requirements)
that a customer has about any
aspect of a vendor's service
performance.
A) DLR
B) Contract
C) SLR
D) NDA
_ ____ identifies and triages Risk Assessment
risks.
_ ____ are external forces that Threats
jeopardize security.
_ ____ are methods used by Threat Vectors
attackers.
_ ____ are the combination of a Risks
threat and a vulnerability.
We rank risks by ______ and Likelihood and impact
_________.
_ ____ use subjective ratings to Qualitative Risk Assessment
evaluate risk likelihood and
impact.
_ ____ use objective numeric Quantitative Risk Assessment
ratings to evaluate risk likelihood
and impact.
_ ____ analyzes and implements Risk Treatment
possible responses to control
risk.
1
, _ ____ changes business Risk Avoidance
practices to make a risk
irrelevant.
_ ____ reduces the likelihood or Risk Mitigation
impact of a risk.
An organization's ____ is the Risk Profile
set of risks that it faces.
_ ____ Initial Risk of an Inherent Risk
organization.
_ ____ Risk that remains in an Residual Risk
organization after controls.
_ ____ is the level of risk an Risk Tolerance
organization is willing to accept.
_ ____ reduce the likelihood or Security Controls
impact of a risk and help identify
issues.
_ ____ stop a security issue from Preventive Control
occurring.
_ ____ identify security issues Detective Control
requiring investigation.
_ ____ remediate security issues Recovery Control
that have occurred.
Hardening == Preventative Virus == Detective
Backups == Recovery For exam (Local and Technical Controls are the same)
_ ____ use technology to Technical Controls
achieve control objectives.
_ ____ use processes to achieve Administrative Controls
control objectives.
_ ____ impact the physical Physical Controls
world.
_ ____ tracks specific device Configuration Management
settings.
_ ____ provide a configuration Baselines (track changes)
snapshot.
_ ____ assigns numbers to each Versioning
version.
_ ____ serve as important Diagrams
configuration artifacts.
_________ and _____ help ensure a Change and Configuration Management
stable operating environment.
Purchasing an insurance policy Risk Transference
is an example of which risk
management strategy?
2
CYBERSECURITY - EXAM PREP
Document specific requirements C) SLR (Service-Level Requirements)
that a customer has about any
aspect of a vendor's service
performance.
A) DLR
B) Contract
C) SLR
D) NDA
_ ____ identifies and triages Risk Assessment
risks.
_ ____ are external forces that Threats
jeopardize security.
_ ____ are methods used by Threat Vectors
attackers.
_ ____ are the combination of a Risks
threat and a vulnerability.
We rank risks by ______ and Likelihood and impact
_________.
_ ____ use subjective ratings to Qualitative Risk Assessment
evaluate risk likelihood and
impact.
_ ____ use objective numeric Quantitative Risk Assessment
ratings to evaluate risk likelihood
and impact.
_ ____ analyzes and implements Risk Treatment
possible responses to control
risk.
1
, _ ____ changes business Risk Avoidance
practices to make a risk
irrelevant.
_ ____ reduces the likelihood or Risk Mitigation
impact of a risk.
An organization's ____ is the Risk Profile
set of risks that it faces.
_ ____ Initial Risk of an Inherent Risk
organization.
_ ____ Risk that remains in an Residual Risk
organization after controls.
_ ____ is the level of risk an Risk Tolerance
organization is willing to accept.
_ ____ reduce the likelihood or Security Controls
impact of a risk and help identify
issues.
_ ____ stop a security issue from Preventive Control
occurring.
_ ____ identify security issues Detective Control
requiring investigation.
_ ____ remediate security issues Recovery Control
that have occurred.
Hardening == Preventative Virus == Detective
Backups == Recovery For exam (Local and Technical Controls are the same)
_ ____ use technology to Technical Controls
achieve control objectives.
_ ____ use processes to achieve Administrative Controls
control objectives.
_ ____ impact the physical Physical Controls
world.
_ ____ tracks specific device Configuration Management
settings.
_ ____ provide a configuration Baselines (track changes)
snapshot.
_ ____ assigns numbers to each Versioning
version.
_ ____ serve as important Diagrams
configuration artifacts.
_________ and _____ help ensure a Change and Configuration Management
stable operating environment.
Purchasing an insurance policy Risk Transference
is an example of which risk
management strategy?
2
