CSTP Apprenticeship Standard Quiz

Which of the following best describes the level of autonomy a cyber security technical professional is expected to have?

• A considerable degree of autonomy

• No autonomy

• Minimal autonomy

• Only works under direct supervision

Why is it important for a cyber security technical professional to work in accordance with applicable laws, regulations, standards, and ethics?

• To ensure their actions are legal and ethical while managing cyber security risks

• To avoid working overtime

• To increase the number of job roles available

• To reduce the need for technical skills

What knowledge is required to design, build, configure, optimise, test, and troubleshoot simple and complex networks?

• Operating system principles and exploits

• Network foundations, protocols, and server virtualisation

• System development methodologies

• Human dimensions of cyber security

Which of the following best describes the management of cyber security risk?

• Management of cyber security risk, tools and techniques

• Application of SIEM tools and techniques

• Legal responsibilities of system owners

• Assurance concepts and approaches

Which concept is essential when applying a management system and developing an information security management plan?

• Concepts & benefits of security management systems, governance & international standards

• Application of SIEM tools

• Legal responsibilities of employees

• Assurance concepts and approaches

What is a key aspect of configuring and using security technology components and key management?

• Security components: how they are used for security/business benefit. Crypto & key management

• Legal, regulatory, compliance environment

• Assurance concepts and approaches

• How to compose a justified security case

What is the purpose of developing an assurance strategy?

• Assurance concepts & approaches

• Management of cyber security risk

• Legal responsibilities of employers

• Security components for business benefit

Which skill is necessary for effective professional communication in a business environment?

• Fluent in written communications and able to articulate complex issues

• Application of SIEM tools

• Security components for business benefit

• Legal, regulatory, compliance environment

What is the main focus when organising testing and investigation work in accordance with legal and ethical requirements?

• Applicability of laws, regulations & ethical standards

• Assurance concepts and approaches

• Security components for business benefit

• How to compose a justified security case

Which of the following is a responsibility when developing and applying information security policy to implement legal or regulatory requirements?

• Legal responsibilities of system owners, users, employers, employees

• Application of SIEM tools and techniques

• Assurance concepts and approaches

• Security components for business benefit