NSVT MODULE 1 QUESTIONS AND ANSWERS
Enclave - Answer -a computer environment connected by one or more internal
networks und the control of a single authority and security policy
An enclave provides what standard cybersecurity cababilities - Answer -boundary
defense
Incident detection response
Key management
Delivery of common apps (email)
What is the backbone of an enclave - Answer -Network Environment
The CSWF requirements can be found in what document - Answer -SECNAVINST M-
5239.2
Foundational knowledge can be obtained in what ways - Answer -approved military
training
Academic degrees
Commercial cybersecurity certifications
Approved training and credentials
What are the CSWF proficiency levels - Answer -Entry/Apprentice: 0-3 yr
Intermediate/Journeyman: 4-6 yr
Expert/Master: 7+ yr
What is a threat - Answer -Object, person, or other entity that represents a constant
danger to an IS
What is vulnerability - Answer -Weakness in an IS that has the potential to be exploited
What is a risk - Answer -The likelihood that a vulnerability can be exploited
What are the most common insider threats - Answer -Junior & untrained personnel
Disgruntled employees
System admins
What threat do system admins posess - Answer -access to systems
Admin pw
Extensive knowledge of security settings
Extensive training in attack methodologies
What are the MAC levels - Answer -Mission Assurance Categories
1 vital
2 important
, 3 necessary
What are the DISA levels and repair times - Answer -CAT I: immediately
CAT II: 90 days
CAT III: 180 days
CAT IV: 1 yr
What are the 3 categories of IAVM and priority - Answer -Infromation Assurance
Vulnerability Management
IAVA: Alerts, high priority
IAVB: Bulletins, medium priority
IAVT: Tech Advisories, low priority
What are the 3 types of password crackers - Answer -dictionary: fastest
Hybrid: uses dictionary and adds numerical and symbolic characters
Brute force: most powerful
What are some threats to portable devices - Answer -loss/theft
Cellular cloneing
Bluetooth hacking attempts
Data leaks
What are specific threats with embarkables - Answer -malware from untrusted networks
Data leaks and spillage
What is a contingency plan - Answer -a comprehensive statement of all the actions to
be taken before, during and after a disaster or emergency condition, along with
documented and tested procedures
What is a backup plan - Answer -used to prevent catastrophic loss of data and
progress, users must maintain adequated backups for their stored data
The Risk Management Process is defined by what document - Answer -NIST SP 800-
30
What is the RMF Process - Answer -Risk assessment
Risk Mitigation
Evaluation and continual assessment
What is the Risk Assesment process - Answer -1. System characterization
2. Threat identification
3. Vulnerability identification
4. Risk analysis
5. Control recommendations
6. Results documentation
Enclave - Answer -a computer environment connected by one or more internal
networks und the control of a single authority and security policy
An enclave provides what standard cybersecurity cababilities - Answer -boundary
defense
Incident detection response
Key management
Delivery of common apps (email)
What is the backbone of an enclave - Answer -Network Environment
The CSWF requirements can be found in what document - Answer -SECNAVINST M-
5239.2
Foundational knowledge can be obtained in what ways - Answer -approved military
training
Academic degrees
Commercial cybersecurity certifications
Approved training and credentials
What are the CSWF proficiency levels - Answer -Entry/Apprentice: 0-3 yr
Intermediate/Journeyman: 4-6 yr
Expert/Master: 7+ yr
What is a threat - Answer -Object, person, or other entity that represents a constant
danger to an IS
What is vulnerability - Answer -Weakness in an IS that has the potential to be exploited
What is a risk - Answer -The likelihood that a vulnerability can be exploited
What are the most common insider threats - Answer -Junior & untrained personnel
Disgruntled employees
System admins
What threat do system admins posess - Answer -access to systems
Admin pw
Extensive knowledge of security settings
Extensive training in attack methodologies
What are the MAC levels - Answer -Mission Assurance Categories
1 vital
2 important
, 3 necessary
What are the DISA levels and repair times - Answer -CAT I: immediately
CAT II: 90 days
CAT III: 180 days
CAT IV: 1 yr
What are the 3 categories of IAVM and priority - Answer -Infromation Assurance
Vulnerability Management
IAVA: Alerts, high priority
IAVB: Bulletins, medium priority
IAVT: Tech Advisories, low priority
What are the 3 types of password crackers - Answer -dictionary: fastest
Hybrid: uses dictionary and adds numerical and symbolic characters
Brute force: most powerful
What are some threats to portable devices - Answer -loss/theft
Cellular cloneing
Bluetooth hacking attempts
Data leaks
What are specific threats with embarkables - Answer -malware from untrusted networks
Data leaks and spillage
What is a contingency plan - Answer -a comprehensive statement of all the actions to
be taken before, during and after a disaster or emergency condition, along with
documented and tested procedures
What is a backup plan - Answer -used to prevent catastrophic loss of data and
progress, users must maintain adequated backups for their stored data
The Risk Management Process is defined by what document - Answer -NIST SP 800-
30
What is the RMF Process - Answer -Risk assessment
Risk Mitigation
Evaluation and continual assessment
What is the Risk Assesment process - Answer -1. System characterization
2. Threat identification
3. Vulnerability identification
4. Risk analysis
5. Control recommendations
6. Results documentation
