Cybersecurity Pre Course Assessment Test Questions and
Answers Graded A
Glen is an (ISC)² member. Glen receives an attending a few online sessions, Tina learns that
email from a company offering a set of answers some participants in the group are sharing
for an (ISC)² certification exam. What should malware with each other, in order to use it
Glen do? - ANSWER -Inform (ISC)² against other organizations online. What should
Tina do? - ANSWER -Stop participating in
the group
Zarma is an (ISC)² member and a security
analyst for Triffid Corporation. One of Zarma's
colleagues is interested in getting an (ISC)2 Which of the following probably poses the most
certification and asks Zarma what the test risk? - ANSWER -A high-likelihood, high-
questions are like. What should Zarma do? - impact event
ANSWER -Explain the style and format of
the questions, but no detail
Druna is a security practitioner tasked with
ensuring that laptops are not stolen from the
A system that collects transactional information organization's offices. Which sort of security
and stores it in a record in order to show which control would probably be best for this purpose? -
users performed which actions is an example of ANSWER -Physical
providing - ANSWER -Non-repudiation
Aphrodite is a member of (ISC)² and a data
The city of Grampon wants to ensure that all of analyst for Triffid Corporation. While Aphrodite is
its citizens are protected from malware, so the reviewing user log data, Aphrodite discovers that
city council creates a rule that anyone caught another Triffid employee is violating the
creating and launching malware within the city acceptable use policy and watching streaming
limits will receive a fine and go to jail. What kind videos during work hours. What should Aphrodite
of rule is this? - ANSWER -Law do? - ANSWER -Inform Triffid management
The Payment Card Industry (PCI) Council is a Preenka works at an airport. There are red lines
committee made up of representatives from painted on the ground next to the runway;
major credit card providers (Visa, Mastercard, Preenka has been instructed that nobody can
American Express) in the United States. The PCI step or drive across a red line unless they
Council issues rules that merchants must follow if request, and get specific permission from, the
the merchants choose to accept payment via control tower. This is an example of a(n)______
credit card. These rules describe best practices control. - ANSWER -Administrative
for securing credit card processing technology,
activities for securing credit card information, and
how to protect customers' personal data. This set The senior leadership of Triffid Corporation
of rules is a _____. - ANSWER -Standard decides that the best way to minimize liability for
the company is to demonstrate the company's
commitment to adopting best practices
Tina is an (ISC)² member and is invited to join an recognized throughout the industry. Triffid
online group of IT security enthusiasts. After management issues a document that explains
1/6
, Cybersecurity Pre Course Assessment Test Questions and
Answers Graded A
that Triffid will follow the best practices published a device and prevents specific types of traffic
by SANS, an industry body that addresses from entering that device. This is a type of
computer and information security. ________ control. - ANSWER -Technical
The Triffid document is a ______, and the SANS
documents are ________. - ANSWER - Sophia is visiting Las Vegas and decides to put a
Policy, standard bet on a particular number on a roulette wheel.
This is an example of _________. -
ANSWER -Acceptance
Which of the following is an example of a
"something you are" authentication factor? -
ANSWER -A photograph of your face Jengi is setting up security for a home network.
Jengi decides to configure MAC address filtering
on the router, so that only specific devices will be
For which of the following assets is integrity allowed to join the network. This is an example of
probably the most important security aspect? - a(n)_______ control. - ANSWER -Technical
ANSWER -The file that contains passwords
used to authenticate users
Of the following, which would probably not be
considered a threat? - ANSWER -A laptop
Triffid Corporation has a rule that all employees with sensitive data on it
working with sensitive hardcopy documents must
put the documents into a safe at the end of the
workday, where they are locked up until the What is the goal of an incident response effort? -
following workday. What kind of control is the ANSWER -Reduce the impact of incidents
process of putting the documents into the safe? - on operations
ANSWER -Administrative
What is the risk associated with resuming full
For which of the following systems would the normal operations too soon after a DR effort? -
security concept of availability probably be most ANSWER -The danger posed by the
important? - ANSWER -Medical systems disaster might still be present
that monitor patient condition in an intensive care
unit
Who approves the incident response policy? -
ANSWER -Senior management
A bollard is a post set securely in the ground in
order to prevent a vehicle from entering an area
or driving past a certain point. Bollards are an What is the overall objective of a disaster
example of ______ controls. - ANSWER - recovery (DR) effort? - ANSWER -Return to
Physical normal, full operations
A software firewall is an application that runs on What is the risk associated with delaying
2/6
Answers Graded A
Glen is an (ISC)² member. Glen receives an attending a few online sessions, Tina learns that
email from a company offering a set of answers some participants in the group are sharing
for an (ISC)² certification exam. What should malware with each other, in order to use it
Glen do? - ANSWER -Inform (ISC)² against other organizations online. What should
Tina do? - ANSWER -Stop participating in
the group
Zarma is an (ISC)² member and a security
analyst for Triffid Corporation. One of Zarma's
colleagues is interested in getting an (ISC)2 Which of the following probably poses the most
certification and asks Zarma what the test risk? - ANSWER -A high-likelihood, high-
questions are like. What should Zarma do? - impact event
ANSWER -Explain the style and format of
the questions, but no detail
Druna is a security practitioner tasked with
ensuring that laptops are not stolen from the
A system that collects transactional information organization's offices. Which sort of security
and stores it in a record in order to show which control would probably be best for this purpose? -
users performed which actions is an example of ANSWER -Physical
providing - ANSWER -Non-repudiation
Aphrodite is a member of (ISC)² and a data
The city of Grampon wants to ensure that all of analyst for Triffid Corporation. While Aphrodite is
its citizens are protected from malware, so the reviewing user log data, Aphrodite discovers that
city council creates a rule that anyone caught another Triffid employee is violating the
creating and launching malware within the city acceptable use policy and watching streaming
limits will receive a fine and go to jail. What kind videos during work hours. What should Aphrodite
of rule is this? - ANSWER -Law do? - ANSWER -Inform Triffid management
The Payment Card Industry (PCI) Council is a Preenka works at an airport. There are red lines
committee made up of representatives from painted on the ground next to the runway;
major credit card providers (Visa, Mastercard, Preenka has been instructed that nobody can
American Express) in the United States. The PCI step or drive across a red line unless they
Council issues rules that merchants must follow if request, and get specific permission from, the
the merchants choose to accept payment via control tower. This is an example of a(n)______
credit card. These rules describe best practices control. - ANSWER -Administrative
for securing credit card processing technology,
activities for securing credit card information, and
how to protect customers' personal data. This set The senior leadership of Triffid Corporation
of rules is a _____. - ANSWER -Standard decides that the best way to minimize liability for
the company is to demonstrate the company's
commitment to adopting best practices
Tina is an (ISC)² member and is invited to join an recognized throughout the industry. Triffid
online group of IT security enthusiasts. After management issues a document that explains
1/6
, Cybersecurity Pre Course Assessment Test Questions and
Answers Graded A
that Triffid will follow the best practices published a device and prevents specific types of traffic
by SANS, an industry body that addresses from entering that device. This is a type of
computer and information security. ________ control. - ANSWER -Technical
The Triffid document is a ______, and the SANS
documents are ________. - ANSWER - Sophia is visiting Las Vegas and decides to put a
Policy, standard bet on a particular number on a roulette wheel.
This is an example of _________. -
ANSWER -Acceptance
Which of the following is an example of a
"something you are" authentication factor? -
ANSWER -A photograph of your face Jengi is setting up security for a home network.
Jengi decides to configure MAC address filtering
on the router, so that only specific devices will be
For which of the following assets is integrity allowed to join the network. This is an example of
probably the most important security aspect? - a(n)_______ control. - ANSWER -Technical
ANSWER -The file that contains passwords
used to authenticate users
Of the following, which would probably not be
considered a threat? - ANSWER -A laptop
Triffid Corporation has a rule that all employees with sensitive data on it
working with sensitive hardcopy documents must
put the documents into a safe at the end of the
workday, where they are locked up until the What is the goal of an incident response effort? -
following workday. What kind of control is the ANSWER -Reduce the impact of incidents
process of putting the documents into the safe? - on operations
ANSWER -Administrative
What is the risk associated with resuming full
For which of the following systems would the normal operations too soon after a DR effort? -
security concept of availability probably be most ANSWER -The danger posed by the
important? - ANSWER -Medical systems disaster might still be present
that monitor patient condition in an intensive care
unit
Who approves the incident response policy? -
ANSWER -Senior management
A bollard is a post set securely in the ground in
order to prevent a vehicle from entering an area
or driving past a certain point. Bollards are an What is the overall objective of a disaster
example of ______ controls. - ANSWER - recovery (DR) effort? - ANSWER -Return to
Physical normal, full operations
A software firewall is an application that runs on What is the risk associated with delaying
2/6
