SEC530 questions and answers 2026\2027 A+ Grade
Where is the perimeter of a network?
- correct answer The host that communicate with the least resistance.
Compliance is a critical subcomponent of:
- correct answer Security
CIST Cyber Security Framework (CSF) Core Functions
- correct answer Identify, Protect, Detect. Respond and Recover
Executive Communicate:
- correct answer Mission priorities, avaliable resources, and overall risk tolerances
Businesses/Process Communicate:
- correct answer Input into the risk management process and collaborates with implementation
Implementation/Operations Communicate:
- correct answer Communicates profile implementation profile
Do preventative controls fail?
- correct answer Yes, in the face of a persistent adversary
Purple Teaming
- correct answer Red and Blue
Governance
- correct answer What is the overall stance on defending against cybersecurity? Is the focus compliance
or defending against APT's?
, Operations
- correct answer How integrated is cybersecurity staff? Are proactive controls in place or are they
reactive?
Architecture and Engineering
- correct answer How well defined and integrated with mission operations are the organizations security
architecture? Are capabilities focused on some or all of the CSF?
ATT&CK
- correct answer (Adversarial Tactics, Techniques, and Common Knowledge) A knowledge base
maintained by the MITRE Corporation for listing and explaining specific adversary tactics, techniques,
and procedures.
Tool: Navigator
- correct answer Open source tool to visualize attacker tactics, techniques, and procedures (TTP) to
identify how your defenses are doing against the ATT&CK matrix.
Tool: DETT&CT
- correct answer Open source tool that visualizes the connections to ATT&CK
Pivot
- correct answer An attack from one system to another
SOC Zones
- correct answer Easy containment of the various needs throughout the business such as OT/ICS,
Manufacturing, R&D, PCI Zones, business critical applications, cloud critical hosting, and DMZ
Time Based Security
- correct answer How long protection works, and how long it takes to detect and react. P > D + R
Cyber Killchain Countermeasures
- correct answer Detect, Deny, Disrupt, Degrade, Decieve
Where is the perimeter of a network?
- correct answer The host that communicate with the least resistance.
Compliance is a critical subcomponent of:
- correct answer Security
CIST Cyber Security Framework (CSF) Core Functions
- correct answer Identify, Protect, Detect. Respond and Recover
Executive Communicate:
- correct answer Mission priorities, avaliable resources, and overall risk tolerances
Businesses/Process Communicate:
- correct answer Input into the risk management process and collaborates with implementation
Implementation/Operations Communicate:
- correct answer Communicates profile implementation profile
Do preventative controls fail?
- correct answer Yes, in the face of a persistent adversary
Purple Teaming
- correct answer Red and Blue
Governance
- correct answer What is the overall stance on defending against cybersecurity? Is the focus compliance
or defending against APT's?
, Operations
- correct answer How integrated is cybersecurity staff? Are proactive controls in place or are they
reactive?
Architecture and Engineering
- correct answer How well defined and integrated with mission operations are the organizations security
architecture? Are capabilities focused on some or all of the CSF?
ATT&CK
- correct answer (Adversarial Tactics, Techniques, and Common Knowledge) A knowledge base
maintained by the MITRE Corporation for listing and explaining specific adversary tactics, techniques,
and procedures.
Tool: Navigator
- correct answer Open source tool to visualize attacker tactics, techniques, and procedures (TTP) to
identify how your defenses are doing against the ATT&CK matrix.
Tool: DETT&CT
- correct answer Open source tool that visualizes the connections to ATT&CK
Pivot
- correct answer An attack from one system to another
SOC Zones
- correct answer Easy containment of the various needs throughout the business such as OT/ICS,
Manufacturing, R&D, PCI Zones, business critical applications, cloud critical hosting, and DMZ
Time Based Security
- correct answer How long protection works, and how long it takes to detect and react. P > D + R
Cyber Killchain Countermeasures
- correct answer Detect, Deny, Disrupt, Degrade, Decieve
