Question 1

In Cybersecurity terminology,a vulnerability is defined as ________:
A)A weakness that threatens the confidentiality,integrity,or availability of data.
B)Something or someone that can damage,disrupt,or destroy an asset.
C)Estimated cost,loss,or damage that can result from an exploit.
D)Tools or techniques that take compromise a network.

Accepted Answer

A vulnerability is a weakness or flaw that can be exploited by attackers to compromise the confidentiality, integrity, or availability of data or systems. It can include software bugs, misconfigurations, or human errors. The presence of vulnerabilities makes systems susceptible to attacks, and it is important to identify and address them in order to prevent potential security breaches.

Question 2

When sending sensitive email,James uses a program that transforms data into unreadable text to protect it from being understood by unauthorized users.James is using ________ to protect his email communications.
A)Authentication
B)Defense-in-depth
C)Encryption
D)Hashing

Accepted Answer

Encryption is the process of encoding data in such a way that it can only be read and understood by someone who has the key or password to unlock it. James is using encryption to protect his email communication by transforming data into unreadable text, which can prevent unauthorized users from accessing the information. Authentication and hashing are also security measures, but they do not relate to the encryption of data. Defense-in-depth is a security strategy that involves implementing multiple layers of security measures to defend against potential attacks, but it is not a technique used specifically for protecting email communication.

Question 3

Most organizations use software or hardware devices to control access to their private networks from the Internet by analyzing incoming and outgoing data packets.These devices are called ___________.
A)Antimalware
B)Firewalls
C)Intrusion detection systems
D)Middleware

Accepted Answer

Firewalls are devices that act as a barrier between a private network and the Internet, analyzing incoming and outgoing data packets to control access to the network. Antimalware refers to software designed to detect and remove malicious software, intrusion detection systems are designed to monitor network traffic for signs of a breach, and middleware refers to software that connects different applications and systems together.

Question 4

The ability of an IS to continue to operate when a failure occurs,but usually for a limited time or at a reduced level is referred to as __________.
A)Fault tolerance
B)Hot site ready
C)Cold site ready
D)System override

Accepted Answer

Fault tolerance is the ability of an IS to continue functioning in the event of a failure or other unexpected situation. This can be achieved through redundancy or backup systems, which allow the system to continue operating even if one component fails. Hot site ready and cold site ready refer to backup locations where an organization can move its operations in the event of a disaster or other disruption, but do not necessarily indicate the ability of the IS to continue operating during a failure. System override does not accurately describe the ability of an IS to function during a failure.

Question 5

LulzSec and Anonymous are examples of ________ that have claimed responsibility for high profile attacks designed to make a political statement,embarrass an organization or government,or to gain publicity.
A)Hacktivists
B)Hostile government agents
C)Industrial spies
D)Cyber terrorists

Accepted Answer

LulzSec and Anonymous are both known as hacktivist groups, meaning they use hacking as a means to promote a political or social agenda. Their attacks often target organizations or governments that they perceive as corrupt or unjust, and are designed to draw attention to these issues. While their methods may be controversial, hacktivists argue that their actions are a necessary form of protest in the digital age.

Question 6

The three key cybersecurity principles are:
A)Data protection,equipment protection,reputation protection
B)Confidentiality,integrity,availability
C)Anticipate,defend,counter-attack
D)Identify,assess risk,take action

Accepted Answer

The three key cybersecurity principles are confidentiality, integrity, and availability. Confidentiality refers to ensuring that information is only accessible to authorized individuals or entities. Integrity means that information is accurate and has not been tampered with. Availability means that information is accessible when needed. These principles form the basis of effective cybersecurity practices. Option A focuses on specific ways to achieve those principles, while options C and D are too general and not directly related to cybersecurity principles.

Question 7

IT professionals work hard to protect key characteristics of an asset from security breaches.One of these characteristics is ________,or the avoidance of unauthorized disclosure of information or data.
A)Integrity
B)Confidentiality
C)Availability
D)Reliability

Accepted Answer

Confidentiality refers to the protection of sensitive information from being disclosed or accessed by unauthorized parties. IT professionals implement various measures such as encryption and access controls to ensure confidentiality of data.

Question 8

Government and corporate officials concerned about security threats do not bring their own cell phones or laptops when traveling overseas.Instead,they bring loaner devices and follow strict security procedures including not connecting to their domestic network while out of the country.These procedures are referred to as _________.
A)Black Ops procedures
B)Do-Not-Carry rules
C)Foreign Threat Prevention procedures
D)Strict Security standards

Accepted Answer

These procedures are known as Do-Not-Carry rules, which are designed to minimize the risk of sensitive information being compromised while traveling overseas.

Question 9

An employee can pose an internal threat by entering false or fraudulent data into a computer,or changing or deleting existing data.This called _________.
A)data mining
B)data tampering
C)ransomware
D)a remote-access Trojan

Accepted Answer

Data tampering refers to the intentional or accidental action of changing or altering data in a computer system without the knowledge or consent of the owner or authorized user. This action can be done by an employee with access to the system, and it poses a significant threat to the integrity of the data and the organization's operations. Data tampering can result in financial loss, regulatory non-compliance, and reputational damage.

Question 10

The 2016 Defense Trade Secrets Act was designed to prevent the theft of trade secrets,also known as __________________.
A)intrusion prevention
B)critical infrastructure
C)corporate identity
D)intellectual property

Accepted Answer

The Defense Trade Secrets Act of 2016 was designed to prevent the theft of trade secrets, which are a type of intellectual property.

Question 11

The preferred method of hackers who want to steal trade secrets and other confidential information from business organizations is ___________.
A)To bribe employees to get access codes and passwords.
B)To bombard websites or networks with so much traffic that they "crash",exposing sensitive data.
C)To break into employees' mobile devices and leapfrog into employers' networks-stealing secrets without a trace.
D)Use a combination of sophisticated hardware tools designed to defeat IT security defenses.

Accepted Answer

Breaking into employees' mobile devices allows hackers to bypass most IT security defenses and access sensitive information without leaving a trace. This method is becoming increasingly popular among cyber criminals.

Question 12

U.S.cybersecurity experts and government officials are increasingly concerned about breaches from __________ into corporate networks,either through mobile devices or by other means.
A)Domestic terrorists
B)Amateur hackers
C)Organized crime syndicates based in the United States
D)Other countries

Accepted Answer

U.S. cybersecurity experts and government officials are primarily concerned about breaches from other countries, especially state-sponsored cyber attacks. These attacks could be aimed at stealing intellectual property, gaining access to sensitive government information, or disrupting critical infrastructure. While domestic terrorists, amateur hackers, and organized crime syndicates also pose a threat, they are not considered to be as significant a risk as foreign governments.

Question 13

IT professionals work hard to protect key characteristics of an asset from security breaches.One of these characteristics is ____________,or the property that data or files have not been altered in an unauthorized way.
A)Integrity
B)Confidentiality
C)Availability
D)Reliability

Accepted Answer

Integrity refers to the property that data or files have not been altered in an unauthorized way. Confidentiality refers to the property that data or files are kept private, availability refers to the property that data or files can be accessed when needed, and reliability refers to the property that data or files are accurate and consistent.

Question 14

In Cybersecurity terminology,a threat is defined as ________.
A)A weakness that threatens the confidentiality,integrity,or availability of data.
B)Something or someone that can damage,disrupt,or destroy an asset.
C)Estimated cost,loss,or damage that can result from an exploit.
D)Tools or techniques that take compromise a network.

Accepted Answer

A threat is any potential danger to an asset, whether it be a physical object or intangible data. It can come from a variety of sources, including human actors, natural disasters, or technical failures. A threat does not necessarily mean an actual exploit has occurred, but rather the vulnerability exists for potential damage or disruption to occur.

Question 15

IT professionals work hard to protect key characteristics of an asset from security breaches.One of these characteristics is _________,or the property that data is accessible and modifiable when needed by those authorized to do so.
A)Integrity
B)Confidentiality
C)Availability
D)Reliability

Accepted Answer

The property that data is accessible and modifiable when needed by those authorized to do so is known as availability. It is one of the three major characteristics of information security, along with confidentiality (the property that data is not disclosed to unauthorized individuals) and integrity (the property that data is not modified by unauthorized individuals). IT professionals work hard to ensure that data is available to those who need it, without allowing unauthorized access or modification.

Question 16

In Cybersecurity terminology,an exploit is defined as ________:
A)A weakness that threatens the confidentiality,integrity,or availability of data.
B)Something or someone that can damage,disrupt,or destroy an asset.
C)Estimated cost,loss,or damage that can result from an exploit.
D)Tools or techniques that take advantage of a vulnerability.

Accepted Answer

An exploit in cybersecurity terminology refers to tools or techniques that take advantage of a vulnerability. It is often used by hackers to gain unauthorized access, control, or damage to a system or network. Option A refers to vulnerability, while option B and C refer to the impact of an exploit.

Question 17

In Cybersecurity terminology,a risk is defined as ________:
A)A weakness that threatens the confidentiality,integrity,or availability of data.
B)Something or someone that can damage,disrupt,or destroy an asset.
C)Estimated cost,loss,or damage that can result from an exploit.
D)The probability of a threat exploiting a vulnerability and the resulting cost.

Accepted Answer

In cybersecurity terminology, risk is defined as the probability of a threat exploiting a vulnerability and the resulting cost. Therefore, option D is the correct choice. Option A refers to vulnerability, option B refers to threat, and option C refers to impact.

Question 18

Chris is a network manager for a large company.She receives daily updates about various malware and then assesses how to best protect her organization's network from attack.In cybersecurity terminology,she is involved in __________.
A)Identifying exposure
B)Risk management
C)A security audit
D)Encryption defenses

Accepted Answer

Chris is involved in risk management by receiving daily updates about various malware and assessing how to best protect her organization's network from attack. Risk management involves identifying potential risks and determining ways to mitigate or address them.

Question 19

Access to top secret or highly secure networks associated with Homeland Security or national defense use authentication methods based on a biological feature,such as a fingerprint or retinal scan to identify a person.These methods are called _____________.
A)Bio-Engineering
B)Physical security
C)Biometrics
D)Human factors

Accepted Answer

Biometrics refers to the use of biological features for identification, such as fingerprints or retinal scans. This is commonly used in highly secure networks associated with Homeland Security or national defense. Bio-Engineering refers to the application of engineering principles and techniques to biological systems, and is not relevant to this context. Physical security refers to measures taken to secure physical assets, but does not specifically refer to biometric authentication methods. Human factors refer to the study of the relationship between humans and systems, and while it is related, it does not specifically refer to biometric authentication methods.

Question 20

One source of cybersecurity threats today are ____________who breach networks in an attempt to gain media attention or for their cause.
A)Hacktivists
B)Political criminals
C)Industrial spies
D)Social engineers

Accepted Answer

Hacktivists are individuals or groups who hack into a network with the intention of promoting a political or social cause, or to gain media attention for their actions. They often use methods such as distributed denial of service attacks (DDoS) to disrupt the target's online services, or leak sensitive information to the public.

Quiz 5: Cybersecurity and Risk Management Technology

In Cybersecurity terminology,a vulnerability is defined as ________:

When sending sensitive email,James uses a program that transforms data into unreadable text to protect it from being understood by unauthorized users.James is using ________ to protect his email communications.

Most organizations use software or hardware devices to control access to their private networks from the Internet by analyzing incoming and outgoing data packets.These devices are called ___________.

The ability of an IS to continue to operate when a failure occurs,but usually for a limited time or at a reduced level is referred to as __________.

LulzSec and Anonymous are examples of ________ that have claimed responsibility for high profile attacks designed to make a political statement,embarrass an organization or government,or to gain publicity.

The three key cybersecurity principles are:

IT professionals work hard to protect key characteristics of an asset from security breaches.One of these characteristics is ________,or the avoidance of unauthorized disclosure of information or data.

An employee can pose an internal threat by entering false or fraudulent data into a computer,or changing or deleting existing data.This called _________.

The 2016 Defense Trade Secrets Act was designed to prevent the theft of trade secrets,also known as __________________.

The preferred method of hackers who want to steal trade secrets and other confidential information from business organizations is ___________.

U.S.cybersecurity experts and government officials are increasingly concerned about breaches from __________ into corporate networks,either through mobile devices or by other means.

IT professionals work hard to protect key characteristics of an asset from security breaches.One of these characteristics is ____________,or the property that data or files have not been altered in an unauthorized way.

In Cybersecurity terminology,a threat is defined as ________.

IT professionals work hard to protect key characteristics of an asset from security breaches.One of these characteristics is _________,or the property that data is accessible and modifiable when needed by those authorized to do so.

In Cybersecurity terminology,an exploit is defined as ________:

In Cybersecurity terminology,a risk is defined as ________:

Chris is a network manager for a large company.She receives daily updates about various malware and then assesses how to best protect her organization's network from attack.In cybersecurity terminology,she is involved in __________.

Access to top secret or highly secure networks associated with Homeland Security or national defense use authentication methods based on a biological feature,such as a fingerprint or retinal scan to identify a person.These methods are called _____________.

One source of cybersecurity threats today are ____________who breach networks in an attempt to gain media attention or for their cause.