Deck 3: Cybersecurity Framework

Question 1

Which of the following is a network of the national standards institutes of more than 160 countries?

A) ISO
B) NIST
C) FIPS
D) IEC

Answer 1

ISO

Question 2

Which of the following is the official publication series for NIST standards and guidelines?

A) ITL bulletins
B) FIPS
C) Special Publication 800 series
D) NIST Internal or Interagency reports

Answer 2

FIPS

Question 3

Which of the following key information security principles traces actions to their source?

A) Accountability
B) Assurance
C) Authorization
D) Accounting

Answer 3

Accountability

Question 4

Which of the following key information security principles grants users and systems a predetermined level of access to information resources?

A) Assurance
B) Authentication
C) Authorization
D) Accountability

Question 5

Which of the following is a behavioral control that can be used to safeguard against the loss of integrity?

A) Rotation of duties
B) Log analysis
C) Code testing
D) Digital signatures

Question 6

Which of the following is a monitoring control that safeguards against the loss of integrity?

A) File integrity monitoring
B) Separation of duties
C) Encryption
D) Digital signatures

Question 7

Which of the following are the three elements of the CIA triad?

A) Authentication, integrity, confidentiality
B) Availability, integrity, confidentiality
C) Access, integrity, confidentiality
D) Authorization, integrity, confidentiality

Question 8

Which of the following refers to a computer used in a DDoS attack?

A) Botnet
B) Victim
C) Bot
D) Handler

Question 9

Which of the following statements best describes NIST?

A) A regulatory government organization that enforces standards
B) A coalition of over 160 countries that creates standards
C) A nonregulatory federal agency that develops and promotes standards
D) A nongovernment organization that develops and promotes standards

Question 10

Which of the following best describes the accounting key information security principle?

A) The logging of access and usage of information resources
B) The configuring of the Security log to record events
C) The process of tracing actions to their source
D) The process of identifying users who seek access to secure information

Question 11

Which of the following best describes the accountability key information security principle?

A) The logging of access and usage of information resources
B) The configuring of the Security log to record events
C) The process of tracing actions to their source
D) The process of identifying users who seek access to secure information

Question 12

Which of the following can achieve authentication in information security?

A) Intrusion detection systems
B) Log files
C) Auditing
D) Tokens

Question 13

Which of the following refers to the requirement that private or confidential information not be disclosed to unauthorized individuals?

A) Availability
B) Confidentiality
C) Integrity
D) Control

Question 14

Which of the following is an example of a security mechanism designed to preserve confidentiality?

A) Controlled traffic routing
B) Logical and physical access controls
C) Database views
D) All of the above

Question 15

CVSS is short for which of the following?

A) Confidential Vulnerability Secure System
B) Common Vulnerability Secure System
C) Common Vulnerability Scoring System
D) Confidential Vulnerability Scoring System

Question 16

Which of the following is not one of the "Five A's" of information security?

A) Availability
B) Assurance
C) Authorization
D) Authentication

Question 17

Which of the following is a collective term given to guidance on topics related to information systems security, predominantly regarding the planning, implementing, managing, and auditing of overall information security practices?

A) Service level agreements
B) Security framework
C) "Five A's" of information security
D) CIA security model

Question 18

The ISO 27002 standard has its origins in which of the following countries?

A) France
B) United States
C) Germany
D) Great Britain

Question 19

Which of the following NIST publications focuses on cybersecurity practices and guidelines?

A) Special Publication 1800 series
B) FIPS
C) ITL bulletins
D) NIST Internal or Interagency reports

Question 20

Which of the following refers to those responsible for implementing, maintaining, and monitoring safeguards and systems?

A) Network engineers
B) System administrators
C) Webmasters
D) All of the above