CYB-3300 Review

What is the definition of a security risk?

• The likelihood of a security breach occurring

• The potential impact of a security breach

• The possibility of losing sensitive data

• The combination of threats, vulnerabilities, and potential impacts

What is the purpose of risk assessment in information security?

• To eliminate all security threats

• To identify and prioritize potential security risks

• To ensure 100% security against all threats

• To implement security controls without assessing risks

Which of the following best describes a vulnerability in information security?

• A weakness in a system that could be exploited by a threat

• A measure of the likelihood of a security incident ocurring

• The potential harm that could result from a security incident

• The impact of a security incident on the organization

What is the role of a threat in information security risk management?

• To identify vulnerabilities in the system

• To assess the potential impact of security incidents

• To exploit weaknesses in the system

• To mitigate security risks using security controls

What is the objective of risk mitigation in information security?

• To eliminate all security risks

• To reduce the likelihood and impact of security risks to an acceptable level

• To ignore security risks and focus on business operations

• To transfer all security risks to external parties

What is the primary goal of an information security risk assessment?

• To eliminate all security risks

• To identify potential security vulnerabilities

• To transfer all security risks to a third party

• To understand and manage security risks effecively

What is the difference between a threat and a vulnerability?

• A threat is a weakness in a system, while a vulnerability is a potential harm

• A threat is a potential harm, while a vulnerability is a weakness in a system

• A threat is the likelihood of a security incident occurring, while a vulnerability is the impact of the incident

• A threat is an external factor, while a vulnerability is an internal factor

In the context of risk management, what does the term "residual risk" refer to?

• The risk that remains after security controls have been implemented

• The risk of a security incident occurring in the future

• The risk associated with technologies

• The risk of compliance violations

What cybersecurity risk involves unauthorized access to a network through weak or stolen credentials?

• Phishing

• Insider Threat

• Ransomware

• SQL Injection

What type of attack involves impersonating a legitimate website or service to deceive users into providing sensitive information?

• Ransomware

• Spoofing

• Denial of Service (DoS)

• Man-in-the-Middle (MitM)