Jackline98

How many steps in NIST RMF? - ️️6 Name steps of the NIST RMF - ️️1) Categorize Info Systems 2) Select Security Controls 3) Implement Security Controls 4) Assess Security Controls 5) Authorize Info Systems 6) Monitor Security Controls What are the layers of COBIT? - ️️Governance and Management What are the Management layers of COBIT? - ️️1) Align, Plan, and Organize 2) Build, Acquire, and Implement 3) Deliver, Service, and Support 4) Monitor, Evaluate, and Assess ...

CRISC Scope - ️️Focuses on risk assessment, treatment, and monitoring. These are methods, processes and protocols used and governed withing a larger enterprise risk mgmt. framework. What does CRISC not address? - ️️CRISC does not address what's detailed in ISO31000 on how to create a risk mgmt program. Does not focus on mandate/commitment aspect of managing risk (leadership area) Does not focus on continual improvement of framework What does CRISC focus on? - ️️Focuses on i...

R1-1 Which of the following is MOST important to determine when defining risk management strategies? A. Risk assessment criteria B. IT architecture complexity C. An enterprise disaster recovery plan D. Business objectives and operations - ️️D is the correct answer. Justification: A. Information on the internal and external environment must be collected to define a strategy and identify its impact. Risk assessment criteria alone are not sufficient. B. IT architecture complexity is mor...

Which of the following is the MOST important reason for conducting security awareness programs throughout an enterprise? A. Reducing the risk of a social engineering attack B. Training personnel in security incident response C. Informing business units about the security strategy D. Maintaining evidence of training records to ensure compliance - ️️A Which of the following is MOST important to determine when defining risk management strategies? A. Risk assessment criteria B. IT arch...

What is the difference between a standard and a policy? - ️️Standard = A mandatory action, explicit rules, controls or configuration settings that are designed to support and conform to a policy. A standard should make a policy more meaningful and effective by including accepted specifications for hardware, software or behavior. Standards should always point to the policy to which they relate. Policy = IT policies help organizations to properly articulate the organization's desired behavio...

FMEA - ️️failure modes effects analysis BPM - ️️business process modeling SPC - ️️statistical process control cusum - ️️cumulative summary. each value is added for a cummulative total. EL - ️️expected loss BCP - ️️business continuity planning CSF - ️️critical success factor ERM - ️️enterprise risk management RCSA - ️️risk control self assessment COSO - ️️committee of sponsoring organizations treadway commission BPR - ️️B...

ISC CC CYBERSECURITY PACKAGE DEAL QUESTIONS AND ANSWERS

20-25% - ️️Kidneys require at least ______ of cardiac output. renin-angiotensin-aldosterone - ️️Reduced perfusion of a kidney activates the _____ system, which causes constriction of peripheral arterioles. calcium oxalate - ️️most common type of kidney stone referred pain - ️️Passage of kidney stones can be extremely painful and may produce ______ to the umbilicus area. umbilicus - ️️Referred pain from kidney stones is seen in the ______ area. 10th - ️️Sens...

Oncogenes - ️️cancer causing genes, promote uncontrolled growth of cells Proto-oncogenes - ️️promote normal cell growth factor and division If proto-oncogenes are mutated the become - - ️️Oncogenes Tumor Supressor Genes (TSGs) are - ️️Antioncogenes antioncogenes - ️️inhibit tumor progression & prevent mutations Cancer develops with increase in - and decrease in - - ️️oncogenes, tumor suppressor genes What are the 2 main types of Tumor Suppressor Genes? -...

Transcription - ️️synthesis of RNA from DNA Transcription results in - ️️mRNA RNA polymerase makes - ️️mRNA mRNA - ️️makes proteins RNA polymerase - ️️binds to DNA Transcription factors (TFs) - ️️A regulatory protein that binds to DNA and affects transcription of specific genes. Can wither activate or repress expression of genes Termination of transcription - ️️RNA polymerase reaches a terminator sequence (Stop codon) and detaches from the template ...

Biogenic Amine Theory linked to depression - ️️Deficiency of neurotransmitters in brain of norepinephrine, dopamine, and/or serotonin. Particularly, a decrease in receptor binding with serotonin. Neurotransmitter Receptor Hypothesis linked to depression - ️️A deficiency of monoamine neurotransmitters at neuronal synapses. Antidepressants increase - ️️Neuronal synaptic levels of monoamine neurotransmitters. if you have more receptors than neurotransmitters - ️️Neurotransm...

What is MAC (Mandatory Access Control)? - ️️The operating system determines who gets access to resources. Much more restricted, not used as much. Which of the following is a detection control?: Bollards Turnstiles Firewalls Smoke sensors - ️️Smoke sensors. By definition, smoke detectors are fire protection devices employed for the early detection of fire. Firewalls are devices that filter incoming traffic, and are a type of logical preventive control. Bollards and turnstiles are t...

What type of security training is specifically designed to educate employees about attack techniques? - ️️capture the flag Linda's organization recently experienced a social engineering attack. The attacker called a help desk employee and persuaded her that she was a project manager on a tight deadline and locked out of her account. The help desk technician provided the attacker with access to the account. What social engineering principle was used? - ️️urgency What type of phishi...

Document specific requirements that a customer has about any aspect of a vendor's service performance. A) DLR B) Contract C) SLR D) NDA - ️️C) SLR (Service-Level Requirements) _________ identifies and triages risks. - ️️Risk Assessment _________ are external forces that jeopardize security. - ️️Threats _________ are methods used by attackers. - ️️Threat Vectors _________ are the combination of a threat and a vulnerability. - ️️Risks We rank risks by ____...

CCSP PACKAGE DEAL|VERIFIED|SUCCESS GUARANTEED

PALS PACKAGE DEAL QUESTIONS AND ANSWERS

ACLS PACKAGE DEAL QUESTIONS AND ANSWERS

Application Server - ️️A computer responsible for hosting applications to user workstations. NIST SP 800-82 Rev.2 Asymmetric Encryption - ️️An algorithm that uses one key to encrypt and a different key to decrypt the input plaintext. Checksum - ️️A digit representing the sum of the correct digits in a piece of stored or transmitted digital data, against which later comparisons can be made to detect errors in the data. Ciphertext - ️️The altered form of a plaintext messag...

Chad is a security practitioner tasked with ensuring that the information on the organization's public website is not changed by anyone outside the organization. This task is an example of ensuring _________. (D1, L1.1.1) A) Confidentiality B) Integrity C) Availability D) Confirmation - ️️B is correct. Preventing unauthorized modification is the definition of integrity. A is incorrect because the website is not meant to be secret; it is open to the public. C is incorrect because C...

Primary Survey - ️️ABCD A-airway B-breathing C-circulation D-defibrilation Secondary Survey - ️️IAID I-intabate (if resp. arrest or can't get good venitlaiton) A-access airway I-IV/IO access for Drugs D-differential diagnosis (H's & T's) What do you do with a non responsive patient? - ️️1st survey, then second survey Med Administration - ️️-IV access: large bore 18 g -Site: AC -always flush after med admin