Fundamentals for Engineers Pro Test
Questions And Complete Answers.
Which job role is responsible for communicating risk and mitigation strategy to the data owner? -
Answer Information Security
Select the hardening controls for an Active Directory/Group Policy system. - Answer Failed login lockout
policy, Lock down application data and Windows temp folders, & Auto-expire inactive accounts after X
days.
Select examples of effective messaging during an incident. - Answer Limit key messages to 3-5 points
that address the issue at hand, Repeat your key messages throughout, & Keep the messages short and to
the point.
What is the goal of the Privacy Program? - Answer Match policies and guidelines to federal, state, and
local or compliance and regulatory requirements, Remove or disable special access privileges when no
longer required, Document and review security controls in place to monitor and actively protect PII, &
Ensure all employees are trained on Internal and External Privacy Policy and Data Retention
Select the best definition for they cybersecurity term:
Intrusion Detection System (IDS) - Answer An IDS operates continuously on the system, running in the
background and notifying administrators when it detects a perceived threat.
How would you implement a process or checklist of items from a secure onboarding process, hardening
process, or incident response checklist? - Answer From first to last item on the list.
How should you respond during a cybersecurity attack? - Answer Act quickly and organized
Risk Assessment vs Network Assessment - Answer Risk assessments look at the business impact.
Select the option that is NOT a Techinal Control. - Answer Security Awareness Training.