IAS Cybersec

Which of the following is true about Framework Core and Framework Profiles?

A. Framework Core is primarily used to identify and prioritize opportunities for improving cybersecurity.

B. Framework Profiles provide a set of desired cybersecurity activities and outcomes using a common language.

• A only
• B only
• Both A & B
• Neither

Which of the following is true about ISO 111111 and ISO/IEC 27000?

A. ISO 111111 is a systematic approach to manage sensitive information securely.

B. ISO/IEC 27000 is divided into sub-standards, some specific to industries or operational choices.

• A only
• B only
• Both A & B
• Neither

Which of the following is true about employees and cybersecurity?

A. Employees can create some of the greatest risks to cybersecurity.

B. If employees are well informed about cybersecurity, they can also be an asset and the first line of defense.

• A only
• B only
• Both A & B
• Neither

Which of the following is true about PCI DSS?

A. PCI DSS stands for Payment Card Industry Data Security Standard.

B. PCI DSS ensures businesses process card payments securely.

• A only
• B only
• Both A & B
• Neither

Which of the following is true about security architecture?

A. Its main advantage is standardization. B. It is cost-effective due to re-use of controls.

• A only
• B only
• Both A & B
• Neither

Which of the following is true about cybersecurity tactics?

A. Layered defense involves implementing multiple security technologies.

B. Inception technology is a recommended tactic for IT teams.

• A only
• B only
• Both A & B
• Neither

Which of the following is true about integrity?

A. Data integrity ensures consistent and expected results with expected performance.

B. System integrity protects against unauthorized changes or tampering of data.

• A only
• B only
• Both A & B
• Neither

Which of the following is true about resource protection?

A. The resource protection scheme ensures only unauthorized users can access system objects.

B. Securing all types of system resources is a system strength.

• A only
• B only
• Both A & B
• Neither

Which of the following is true about operations and architecture risk assessment?

A. Operations and monitoring involve day-to-day processes like threat management.

B. Architecture risk assessment ensures security policies are mirrored in implementation.

• A only
• B only
• Both A & B
• Neither

Which of the following is true about incident response plans?

A. A bad incident response plan provides repeatable incidents for recovery.

B. IT teams should have a cyber incident response plan in place.

• A only
• B only
• Both A & B
• Neither