Threats, Vulnerabilities, Mitigation Review

Front

Which best explains what threat actor/threat agent is?

Back

A person or entity responsible for an event that has been identified as a security incident or as a risk.

Front

Which best explains what a whistleblower is?

Back

someone with an ethical motivation for releasing confidential information.

Front

Which type of threat actor is MOST likely responsible for the spike in unauthorized network traffic aimed at a prominent multinational corporation's web servers, which was intended to disrupt online services following a controversial policy decision? Options: Hactivist, Nation-State, Individual Hacker, Insider Threat

Back

Hactivist

Front

Which type of threat actor do the following steps guard against?

• Create and follow onboarding and off-boarding procedures.
• Employ the principal of least privilege.
• Have appropriate physical security controls in place.

Back

Insider

Front

Which type of threat actor is MOST likely to engage in cyber espionage with strategic or political motivations? Options: Organized crime, Hacktivist, Competitors, Nation-state

Back

Nation-state

Front

In the context of cybersecurity threats, what does the situation of a marketing team using a new cloud-based project management tool without consulting the IT department BEST exemplify?

Back

Shadow IT

Front

In which phase of an attack does the attacker gather information about the target?

Back

Reconnaissance

Front

What is the MOST effective approach to enhance the security posture for CloudSecure's unsupported software applications? Options: Implementing regular patch management to fix the faulty code., Consolidating all operating systems and applications into one product., Isolating the unsupported apps from other systems to reduce the attack surface., Ignoring the vulnerability as it can only be exploited in specific circumstances.

Back

Isolating the unsupported apps from other systems to reduce the attack surface.

Front

As a cybersecurity analyst, you are tasked with reducing the supply chain attack surface in your organization. Which area should you focus on to MOST effectively mitigate this risk? Options: Employee training, Internal IT infrastructure, Customer data protection, Vendor management

Back

Vendor management

Front

Which phase of the social engineering process is Ron in?

Back

Development phase