Process of Security Design

Security Domain is

• everything valuable to the organization including buildings, equipment, employees etc.

• the physical and logical perimeter boundaries of the network

• the impact of the threat exploiting the vulnerability

• the natural, accidental or intentional vulnerabilities

Which of the following step is not part of a security plan development ?

• develop security policies

• identify and prioritize network vulnerabilities

• conduct risk assessment

• develop work-breakdown structure

Which one of the following is not a security control ?

• user access controls

• training and awareness

• configuration controls

• risk assessment

What is the difference between a logical and a physical topology ?

• logical topology shows one part of the physical topology identifying the network devices and cable layout

• physical topology shows the physical locations of devices and cables whereas logical topology shows the logical design on the network

• logical topology shows the locations of devices and cables whereas physical topology shows the IP address allocations on the network

• none of the above

Attackers who violate computer security for personal gain or inflict malicious damage are called

• White hat hackers

• Gray hat hackers

• Black hat hackers

• Purple hat hackers

People who steel documents to find and publish sensitive information from within an organization are called

• Cyber-criminals

• Insiders

• Script kiddies

• White hats

The seven steps of 'cyber security chain' in the right order is

• Delivery, Exploitation, Reconnaissance, Weaponisation, Installation, Command and control, Action on objectives

• Reconnaissance, Weaponisation, Installation, Command and control, Action on objectives, Delivery, Exploitation

• Reconnaissance, Weaponisation, Delivery, Exploitation, Installation, Command and control, Action on objectives

• Installation, Exploitation, Reconnaissance, Weaponisation, Delivery, Command and control, Action on objectives

In which step of the cyber security chain do "attackers analyse the collected information to find out which method is useful to launch their attack" ?

• Reconnaissance

• Weaponisation

• Delivery

• Exploitation

In which step of the cyber security chain do "attackers send malicious payloads to the victim by an email through an

infected web server or other methods used for attacks."

• Reconnaissance

• Weaponisation

• Delivery

• Exploitation

Natural disasters such as fire and floods are referred to as

• Human threats

• Environmental threats

• Technological threats

• Cyber threats