Itelect1 Pre-Test 2

What is a threat in the context of cybersecurity?

• A flaw in a system

• A potential cause of an unwanted incident

• A strong security measure

• A physical firewall

What is a vulnerability?

• An antivirus update

• A system's strength

• A weakness that can be exploited

• A backup file

Which of the following is a safeguard?

• Malware

• Backup policy

• Unpatched software

• Threat actor

Which of the following is an example of a technical control?

• Security policy

• Employee handbook

• Firewall

• Ethics training

Which of the following represents a physical control?

• Password policy

• CCTV cameras

• Antivirus software

• Encryption algorithm

A risk arises when:

• There are no threats

• There are no assets

• A threat exploits a vulnerability

• A safeguard is applied

Which of these is a common vulnerability in web applications?

• Phishing

• Cross-site scripting (XSS)

• Brute-force attack

• Backup failure

Which is a non-technical safeguard?

• Multi-factor authentication

• Access control list

• Security awareness training

• Data encryption

What is the primary purpose of a control?

• To initiate attacks

• To reduce or eliminate risk

• To back up systems

• To exploit vulnerabilities

What type of control is applied after an incident has occurred?

• Preventive

• Detective

• Corrective

• Directive