ISACA Studying Cyber Security Fundamentals Exam Questions With Correct Answers

ISACA Studying Cyber Security Fundamentals
Exam Questions With Correct Answers


Three common controls used to protect availablity.
| | | | | | |




a) redundancy, backups and access control
| | | | |




b. Encryption, file permissions and access controls.
| | | | | |




| c. Access controls, logging and digital signatures.
| | | | | |




d. Hashes, logging and backups. - ANSWER✔✔✔-A. Redundancy,
| | | | | | | | |



backups and access control
| | |




Governance has several goals including:
| | | |




a. providing strategic direction
| | | |




b. ensuring that objectives are achieved
| | | | | |




c. verifying that organizational resources are being used appropriately
| | | | | | | |




d. directing and monitoring security activities.
| | | | | |




e.Ascertaining whether risk is being managed properly - ANSWER✔✔✔-
| | | | | | | |



a. provisioning strategic direction.
| | | |




b. ensuring that objective are achieved
| | | | | |




c. verifying that organizational resources are being used appropriately
| | | | | | | | |




e. Ascertaining whether risk is being managed properly.
| | | | | | |

,Choose 3. According to the NIST framework which of the following are
| | | | | | | | | | | |



considered key functions necessary for the protection of digital assets?
| | | | | | | | | |




a. Encrypt b. Protect c. Investigate d. Recover e. Identify -
| | | | | | | | | | | |



ANSWER✔✔✔-B. Protect |




D.recover |




E. Identify
|




Which of the following is the best definition for cybersecurity?
| | | | | | | | | |




a. The process by which an organization manages cybersecurity risk to
| | | | | | | | | | | |



an acceptable level
| | |




b. The protection of information from unauthorized access or disclosure
| | | | | | | | |




c. The protection of paper documents, digital and intellectual property,
| | | | | | | | | |



and verbal or visual communications d. Protecting information assets by
| | | | | | | | |



|addressing threats to information that is processed, stored or
| | | | | | | | |



transported by interworked information systems - ANSWER✔✔✔-d.
| | | | | | |



Protecting information assets by addressing threats to information that
| | | | | | | | |



is processed, stored or transported by internetworked information
| | | | | | | |



systems.


Which of the following cybersecurity roles is charged with the duty of
| | | | | | | | | | | |



managing incidents and remediation? | | | |




| a. Board of directors
| | |




| b. Executive committee
| |




c. Cybersecurity management
| | |

,d. Cybersecurity practitioner - ANSWER✔✔✔-c. Cybersecurity
| | | | | |



managment


The core duty of cybersecurity is to identify, respond and manage
| | | | | | | | | | |



________ to an organization's digital assets. - ANSWER✔✔✔-Risk
| | | | | | |




A ________ is anything capable of acting against an asset in a manner
| | | | | | | | | | | | |



that can cause harm. - ANSWER✔✔✔-Threat
| | | | |




A _______ is something of value worth protecting. - ANSWER✔✔✔-
| | | | | | | | |



Asset


A _________ is a weakness in the design, implementation, operation or
| | | | | | | | | | |



internal controls in a process that could be exploited to violate the
| | | | | | | | | | | |



system security - ANSWER✔✔✔-vulnerability
| | |




the path or route used to gain access to the target asset is known as a
| | | | | | | | | | | | | | | |



______ - ANSWER✔✔✔-attack vector| | |




In an attack, the container that delivers the exploit to the target is
| | | | | | | | | | | | |



called? - ANSWER✔✔✔-Payload | |




______ communicates required and prohibited activities and behaviors -
| | | | | | | |



ANSWER✔✔✔-Policies
|

, _____ is a class of malware that hides the existence of other malware by
| | | | | | | | | | | | |



modifying the underlying operating system - ANSWER✔✔✔-Rootkit
| | | | | | |




_______ provides details on how to comply with policies and standards.
| | | | | | | | | |



- ANSWER✔✔✔-Procedures
| |




______ contain step-by-step instructions to carry out procedures -
| | | | | | | | |



ANSWER✔✔✔-Guidelines


________ also called malicious code, is software designed to gain access
| | | | | | | | | |



to targeted computer systems. steal info or disrupt computer
| | | | | | | | | |



operations. - ANSWER✔✔✔-Malware | |




_________ are used to interpret policies in specific situations -
| | | | | | | | | |



ANSWER✔✔✔-Standards


____ are solutions to software programming and coding errors -
| | | | | | | | | |



ANSWER✔✔✔-Patches


_______ includes many components such as directory services,
| | | | | | | |



authentication and authorization services, and user management
| | | | | | |



capabilities such as provisioning and deprovisioning - ANSWER✔✔✔-
| | | | | | |



Identity Management |