Understanding Cyber Security Policies

What is the primary goal of a data breach response plan?

• To punish the person responsible for the breach

• To minimise damage and recover data

• To inform the media about the breach

• To delete all affected data

Which of the following is a key component of user access control policies?

• Allowing all users to access all data

• Granting access based on user roles

• Sharing passwords among team members

• Disabling all user accounts

What is the purpose of network security guidelines?

• To increase network traffic

• To ensure the network is accessible to everyone

• To protect the network from unauthorised access

• To slow down network speed

Which of the following is an essential step in incident response procedures?

• Ignoring the incident

• Documenting the incident details

• Deleting all logs

• Informing only the IT department

What should be the first action when a data breach is detected?

• Notify the media

• Contain the breach

• Delete all data

• Ignore the breach

Which of the following best describes the principle of least privilege in user access control?

• Users have access to all data

• Users have access only to the data necessary for their role

• Users have no access to any data

• Users can access data based on their personal preference

What is a common method used to secure a network?

• Using default passwords

• Implementing firewalls

• Allowing open access to all users

• Disabling encryption

In incident response procedures, what is the purpose of the recovery phase?

• To punish the attacker

• To restore systems to normal operation

• To permanently shut down systems

• To ignore the incident

What is an important consideration when developing a data breach response plan?

• Keeping the plan secret from all employees

• Regularly updating and testing the plan

• Only involving the IT department

• Making the plan overly complex

Which of the following is a benefit of implementing user access control policies?

• Increased risk of data breaches

• Enhanced data security

• Slower system performance

• More complex user management