Incident Management 1

What are the three core principles that information security incidents threaten?

• Confidentiality, detection, and governance

• Integrity, availability, and confidentiality

• Resilience, incident response, and governance

• Detection, response, and recovery

Which function in the NIST CSF 2.0 model involves restoring services and learning from incidents?

• Identify

• Respond

• Protect

• Recover

According to the SOCI Act, who must report cyber security incidents?

• Every employee of a government department

• Critical infrastructure owners and operators

• Internet service providers

• Vendors of consumer-grade software

What is the purpose of Business Continuity in a Box, provided by the ACSC?

• A software tool for encrypting communication channels

• A legal framework for reporting ransomware payments

• A resource to help organisations restore communications and business services during a cyber incident

• A mobile app for alerting the Australian Signals Directorate

What is one recommended way to manage cyber supply chain risk?

• Allow suppliers unrestricted access to internal networks

• Avoid sharing incident reports with suppliers

• Outsource cyber security training to third parties

• Evaluate the cyber security posture and access level of third-party vendors

What is one benefit of conducting a post-incident review?

• It delays business recovery

• It helps document and improve future responses

Which Australian Act requires reporting of ransomware payments for large businesses?

• Cyber Privacy Act 2020

• SOCI Act

• Cyber Security Act 2024

• Information Systems Act

What is a requirement under the updated SOCI Act regarding data systems?

• Store all backups on local networks

• Expand 'asset' to include business-critical data systems

• Disable remote access

• Report incidents annually

Which control should be implemented during the 'operation' phase of the supply chain lifecycle?

• Encrypt data at rest

• Install systems

• Monitor for unauthorized access

• Package for delivery

A large organization operates hundreds of business applications. How should the security manager prioritize applications for protection from a disaster?

• Conduct a business impact analysis

• Conduct a risk assessment

• Conduct a business process analysis

• Rank the applications in order of criticality