Enhancing Cyber Resilience through Assurance

Which of the following is a primary goal of data protection strategies in ICT infrastructure?

• To increase network speed

• To ensure confidentiality, integrity, and availability of data

• To reduce hardware costs

• To simplify user authentication

What is the main purpose of a risk management framework in information assurance?

• To eliminate all cyber threats

• To identify, assess, and mitigate risks to ICT systems

• To monitor employee productivity

• To automate software updates

Which of the following best describes an incident response plan?

• A document outlining daily IT tasks

• A set of procedures for detecting, responding to, and recovering from cyber incidents

• A list of all network devices

• A schedule for software upgrades

Why is security awareness training important for staff in an organisation?

• It reduces the need for technical controls

• It helps staff recognise and respond to security threats

• It increases the number of passwords used

• It replaces the need for firewalls

Which of the following is an example of an access control mechanism?

• Antivirus software

• Password-protected user accounts

• Data encryption

• Network cabling

What is the primary function of network security protocols?

• To increase internet speed

• To protect data during transmission across networks

• To manage user accounts

• To monitor physical access to servers

Which of the following is a common data protection strategy?

• Regular data backups

• Disabling firewalls

• Sharing passwords

• Ignoring software updates

What does the principle of least privilege refer to in access control?

• Giving all users administrator rights

• Granting users only the access necessary for their job

• Allowing guests to access all files

• Removing all access controls

Which risk management process involves determining the likelihood and impact of potential threats?

• Risk assessment

• Risk avoidance

• Risk transfer

• Risk acceptance

Which of the following is a key component of an effective incident response plan?

• Ignoring minor security breaches

• Clearly defined roles and responsibilities

• Allowing unmonitored remote access

• Disabling antivirus software