Question 1

IT professionals work hard to protect key characteristics of an asset from security breaches. One of these characteristics is _________________, or the property that data is accessible and modifiable when needed by those authorized to do so.
A) Integrity
B) Confidentiality
C) Availability
D) Reliability

Accepted Answer

Availability refers to the property that data is accessible and modifiable when needed by those authorized to do so, which is an important characteristic that IT professionals work hard to protect from security breaches. Integrity relates to the accuracy and completeness of data, confidentiality refers to the property that data is only accessible to authorized individuals, and reliability refers to the consistency and dependability of a system or network.

Question 2

In Cybersecurity terminology, a threat is defined as:
A) A weakness that threatens the confidentiality, integrity, or availability CIA) of an asset
B) Something or someone that may result in harm to an asset
C) Estimated cost, loss, or damage that can result from an exploited vulnerability
D) Tool or technique that takes advantage of a vulnerability

Accepted Answer

A threat refers to something or someone that may result in harm to an asset. While options A, C, and D all relate to cybersecurity terminology, they are not accurate definitions of a threat. Option A refers to a vulnerability, option C refers to the consequence of an exploited vulnerability, and option D refers to the tool or technique used to take advantage of a vulnerability.

Question 3

IT professionals work hard to protect key characteristics of an asset from security breaches. One of these characteristics is _________________, or the property that data or files have not been altered in an unauthorized way.
A) Integrity
B) Confidentiality
C) Availability
D) Reliability

Accepted Answer

Integrity refers to the property of data or files not being altered or tampered with in an unauthorized or unintended manner. It's an essential characteristic that IT professionals work hard to protect from security breaches. Confidentiality relates to preventing unauthorized people from accessing sensitive or private data or files, while availability refers to ensuring that authorized parties are always able to access the data or files they need. Reliability relates to the consistency and dependability of an asset or system.

Question 4

IT professionals work hard to protect key characteristics of an asset from security breaches. One of these characteristics is _________________, or the avoidance of unauthorized disclosure of information or data.
A) Integrity
B) Confidentiality
C) Availability
D) Reliability

Accepted Answer

Confidentiality is the protection of information from unauthorized disclosure. This is a critical aspect of security as it ensures that only authorized individuals can access sensitive data. Integrity refers to the accuracy and completeness of data, availability ensures that data is accessible to authorized users when needed, and reliability refers to the consistency in the performance of a system or asset over time. While all characteristics are important, confidentiality specifically addresses the avoidance of unauthorized disclosure.

Question 5

In Cybersecurity terminology, an exploit is defined as:
A) A weakness that threatens the confidentiality, integrity, or availability CIA) of an asset
B) The estimated cost, loss, or damage that can result from an exploited vulnerability
C) A tool or technique that takes advantage of a vulnerability
D) The probability of a threat exploiting a vulnerability

Accepted Answer

An exploit is a tool or technique that takes advantage of a vulnerability. It is not a weakness or the cost/result of an exploited vulnerability, nor is it the probability of a threat exploiting a vulnerability.

Question 6

The three key principles of cybersecurity are:
A) Data protection, equipment protection, reputation protection
B) Confidentiality, integrity, availability
C) Anticipate, defend, counter-attack
D) Identify, assess risk, take action

Accepted Answer

The three key principles of cybersecurity are Confidentiality, Integrity and Availability (CIA). Confidentiality refers to protecting data from unauthorized access by ensuring it is only accessible to authorized individuals. Integrity relates to ensuring the accuracy and completeness of data in terms of its transmission, storage and processing while preventing unauthorized changes. Availability involves ensuring that data is available to authorized users whenever it is needed.

Question 7

Viruses, worms, Trojan horses, spyware, and any other type of disruptive, destructive, or unwanted programs are examples of ___________________.
A) Spam
B) Adware
C) Malware
D) Spyware

Accepted Answer

The given types of programs are all examples of malware, which is short for malicious software. Spam is unsolicited and irrelevant messages, adware displays unwanted advertisements, and spyware spies on a user's computer activities without their knowledge.

Question 8

In Cybersecurity terminology, a risk is defined as:
A) A weakness that threatens the confidentiality, integrity, or availability CIA) of an asset
B) The estimated cost, loss, or damage that can result from an exploited vulnerability
C) A tool or technique that takes advantage of a vulnerability
D) The probability of a threat exploiting a vulnerability

Accepted Answer

A risk in cybersecurity is the probability of a threat exploiting a vulnerability, which can lead to potential loss or damage.

Question 9

The ability of an IS to continue to operate when a failure occurs, but usually for a limited time or at a reduced level is referred to as _______________.
A) Fault tolerance
B) Minimal Operating Level MOL)
C) Stand-by Mode
D) System Fail Mode

Accepted Answer

Fault tolerance refers to the ability of an IS to continue to operate even when a failure occurs, either by switching to a redundant system or by reducing its level of operation temporarily until the error can be corrected. The other options, Minimal Operating Level (MOL), Stand-by Mode, and System Fail Mode, do not adequately describe this concept.

Question 10

Some government and corporate officials concerned about security threats from abroad do not bring their own cell phone or laptop when traveling overseas. Instead, they bring loaner devices and follow a strict regimen of security procedures including not connecting to their US network while out of the country. These procedures are referred to as ____________________.
A) Top Secret Security Procedures
B) Do-Not-Carry-Rules
C) Foreign Threat Prevention Procedures FTPP)
D) Strict Security Standards SSS)

Accepted Answer

These procedures are known as Do-Not-Carry-Rules, which are designed to minimize the risk of sensitive information being compromised when officials travel to potentially hostile or insecure environments.

Question 11

Chris Morrisey is a network manager for a large company. She receives daily updates about various worms, viruses and other malicious software found on the Internet including an assessment of how dangerous each of these are so that she can figure out how best to protect her organization's network. The information in her report is about __________________.
A) Threats and risks
B) Vulnerabilities
C) Exposure
D) Network Integrity

Accepted Answer

The report received by Chris Morrisey contains information about threats and risks, specifically worms, viruses, and other malicious software found on the Internet. This information helps her determine how to best protect her organization's network from these potential threats. The other options (B, C, and D) do not fully encompass the type of information included in her daily update.

Question 12

Chris Morrisey is a network manager for a large company. She receives daily updates about various worms, viruses and other malicious software found on the Internet and then assesses how to best protect her organization's network from possible attack. In cybersecurity terminology, she is involved in ________________________.
A) Identifying exposure
B) Risk management
C) An audit
D) Encryption

Accepted Answer

Chris Morrisey's role involves assessing and managing potential risks to her organization's network from cyber threats. This aligns with the definition of risk management in the cybersecurity industry. While identifying exposure and conducting audits may be part of her job, they are not the best fit for describing her specific responsibilities in this scenario. Encryption, while important for protecting data, is not directly related to the kind of work Chris is doing.

Question 13

Access to top secret or highly secure networks associated with Homeland Security or national defense often use authentication methods based on a biological feature, such as a fingerprint or retina to identify a person. These methods are called ____________________.
A) Advanced security methods
B) Physical security
C) Biometrics
D) Unique Identification methods

Accepted Answer

Authentication methods based on a biological feature are known as biometrics.

Question 14

In Cybersecurity terminology, a vulnerability is defined as:
A) A weakness that threatens the confidentiality, integrity, or availability CIA) of an asset
B) Something or someone that may result in harm to an asset
C) Estimated cost, loss, or damage that can result from a cybersecurity breach
D) Tool or technique that threatens the confidentiality, integrity, or availability CIA) of an asset

Accepted Answer

A vulnerability is a weakness or flaw in a system, application, or process that can be exploited by attackers to compromise the confidentiality, integrity, or availability (CIA) of an asset, such as data or a network, leading to cyber attacks or data breaches. Therefore, option A is the correct definition of vulnerability in cybersecurity. Option B is a definition of a threat, option C is a definition of risk, and option D is a definition of an attack or exploit.

Question 15

Intrusion Detection Systems IDS) are designed to monitor network traffic and identify threats that may have breached the networks initial defenses. These include all of the following except:
A) An attacker who is using the identity or credentials of a legitimate user to gain access to an IS, device, or network
B) A legitimate user who performs actions he is not authorized to do
C) A user who tries to disguise or cover up his actions by deleting audit files or system logs.
D) Employees who use computing or network resources inefficiently.

Accepted Answer

IDS are not designed to monitor and detect inefficient use of computing or network resources by employees. IDS are focused on detecting and preventing unauthorized access and malicious activity on the network.

Question 16

U.S. cybersecurity experts and government officials are increasingly concerned about breaches from ______________________ into corporate networks, either through mobile devices or by other means.
A) Domestic terrorists
B) Amateur hackers
C) Organized crime syndicates based in the United States
D) Other countries

Accepted Answer

U.S. cybersecurity experts and government officials are increasingly concerned about breaches from other countries into corporate networks. This includes state-sponsored cyber attacks from countries such as Russia, China, and North Korea, as well as attacks from non-state actors based in countries such as Iran and Venezuela. Many of these attacks target sensitive information such as trade secrets, intellectual property, and personal data.

Question 17

When sending sensitive email, James uses a program that transforms data into scrambled code to protect it from being understood by unauthorized users. James is using ______________ to protect his email communications.
A) Authentication
B) Coding
C) Encryption
D) Text Mashing

Accepted Answer

Encryption is the process of converting data into a coded language to protect it from unauthorized access. It provides confidentiality to the data being transmitted. The other options (A) Authentication, (B) Coding, and (D) Text Mashing are not specific to the protection of email communications.

Question 18

Most organizations use a software or hardware device that controls access to their private network from the Internet by analyzing data packets entering or exiting it. These devices are called ________________.
A) Secure channels
B) Botnets
C) Virus Blockers
D) Firewalls

Accepted Answer

Firewalls are specifically designed to control access to private networks from the Internet by analyzing data packets entering or exiting it. The other options (A, B, and C) do not fit the description of this type of device.

Question 19

In cybersecurity terms, the function of a password together with a username is to __________ a user's identity to verify that the person has the right to access a computer or network.
A) Record
B) Authenticate
C) Substantiate
D) Validate

Accepted Answer

The function of a password together with a username is to authenticate a user's identity, meaning to confirm that the user is who they claim to be in order to grant access to a computer or network.

Question 20

__________________ contain a combination of upper- and lower-case letters, numbers, and punctuation marks, and at least eight characters long although ten characters is better.
A) Secret codes
B) Digital keys
C) Strong passwords
D) Unbreakable passcodes

Accepted Answer

Strong passwords are recommended to contain a combination of upper- and lower-case letters, numbers, and punctuation marks, and to be at least eight characters long, although ten characters is better. Secret codes, digital keys, and unbreakable passcodes may also be secure, but they do not necessarily follow the recommended guidelines for strong passwords.

Quiz 5: Cybersecurity, Compliance, and Business Continuity

IT professionals work hard to protect key characteristics of an asset from security breaches. One of these characteristics is _________________, or the property that data is accessible and modifiable when needed by those authorized to do so.

In Cybersecurity terminology, a threat is defined as:

IT professionals work hard to protect key characteristics of an asset from security breaches. One of these characteristics is _________________, or the property that data or files have not been altered in an unauthorized way.

IT professionals work hard to protect key characteristics of an asset from security breaches. One of these characteristics is _________________, or the avoidance of unauthorized disclosure of information or data.

In Cybersecurity terminology, an exploit is defined as:

The three key principles of cybersecurity are:

Viruses, worms, Trojan horses, spyware, and any other type of disruptive, destructive, or unwanted programs are examples of ___________________.

In Cybersecurity terminology, a risk is defined as:

The ability of an IS to continue to operate when a failure occurs, but usually for a limited time or at a reduced level is referred to as _______________.

Access to top secret or highly secure networks associated with Homeland Security or national defense often use authentication methods based on a biological feature, such as a fingerprint or retina to identify a person. These methods are called ____________________.

In Cybersecurity terminology, a vulnerability is defined as:

Intrusion Detection Systems IDS) are designed to monitor network traffic and identify threats that may have breached the networks initial defenses. These include all of the following except:

U.S. cybersecurity experts and government officials are increasingly concerned about breaches from ______________________ into corporate networks, either through mobile devices or by other means.

When sending sensitive email, James uses a program that transforms data into scrambled code to protect it from being understood by unauthorized users. James is using ______________ to protect his email communications.

Most organizations use a software or hardware device that controls access to their private network from the Internet by analyzing data packets entering or exiting it. These devices are called ________________.

In cybersecurity terms, the function of a password together with a username is to __________ a user's identity to verify that the person has the right to access a computer or network.

__________________ contain a combination of upper- and lower-case letters, numbers, and punctuation marks, and at least eight characters long although ten characters is better.