Cybersecurity Roles and Concepts Quiz

Play an AI-generated podcast conversation about this lesson

What best describes an attack vector?

A specific path by which a threat actor gains unauthorized access to a system (correct)

A report detailing the findings of a security assessment

A type of hardware used in cybersecurity efforts

A method for securing a network against intrusions

Which of the following is NOT a type of attack vector?

Cyber

Environmental (correct)

Physical

Human

What does the term 'likelihood' refer to in the context of threat assessment?

The chance of a threat being realized, usually expressed as a percentage (correct)

The frequency of vulnerabilities being exploited

The time it takes to respond to a security incident

The total cost incurred from a security breach

What is the primary goal of threat hunting in cybersecurity?

To detect presence of threats that haven’t been discovered by regular monitoring Signup and view all the answers

How is 'impact' defined in a threat assessment scenario?

The measurement of damage costs, usually expressed in dollars Signup and view all the answers

What is the primary responsibility of a Cybersecurity Manager/Administrator?

Managing network operations and infrastructure Signup and view all the answers

Which role is primarily concerned with the creation of tools and techniques for cybersecurity?

Cybersecurity Engineer Signup and view all the answers

Who is responsible for directing the overall cybersecurity strategy of an organization?

Chief Information Security Officer Signup and view all the answers

What distinguishes a Cybersecurity Engineer from a Cybersecurity Manager?

The Engineer focuses on system design, while the Manager oversees operations. Signup and view all the answers

Which of the following roles likely has the highest level of responsibility in an organization?

Chief Information Security Officer Signup and view all the answers

What should you do if you believe you’ve completed everything but still do not see a 100% completion rate?

Email <a href="mailto:[email protected]">[email protected]</a> Signup and view all the answers

What is the result of receiving a course completion letter?

You qualify for the 60-Day 100% Pass Guarantee Signup and view all the answers

Who is responsible for the hands-on configuration of a system in cybersecurity?

Cybersecurity Specialist / Technician Signup and view all the answers

How can learners ask questions regarding the course or concepts they do not understand?

Email <a href="mailto:[email protected]">[email protected]</a> Signup and view all the answers

Which of the following statements is true regarding the 60-Day 100% Pass Guarantee?

It is contingent upon receiving a completion letter Signup and view all the answers

Which role primarily involves direct action in configuring cybersecurity systems?

Cybersecurity Specialist / Technician Signup and view all the answers

What action should be taken if a concept within the course is unclear?

Email <a href="mailto:[email protected]">[email protected]</a> for assistance Signup and view all the answers

What type of company is Dion Training Solutions in relation to CompTIA?

A Platinum Delivery Partner Signup and view all the answers

Which of the following describes a preventative control?

It eliminates or reduces the likelihood that an attack can succeed. Signup and view all the answers

What is the main purpose of a detective control?

To identify and record any attempted or successful intrusion. Signup and view all the answers

Which statement about corrective controls is correct?

They act to address impacts after an intrusion event has occurred. Signup and view all the answers

What does the efficiency of a security control measure?

The duration it delays an attack from succeeding. Signup and view all the answers

Which of the following is NOT a function of a preventative control?

Eliminate all intrusion attempts. Signup and view all the answers

Which type of control focuses on access denial?

Preventative Control Signup and view all the answers

What role do physical controls play in security?

They prevent intrusion by physical barriers. Signup and view all the answers

Which of the following is an example of a corrective control?

Incident response plan after a data breach. Signup and view all the answers

What is a primary purpose of Open-Source Intelligence (OSINT)?

To develop strategies for compromising a target Signup and view all the answers

Which of the following could be considered a source of OSINT?

Publicly available information Signup and view all the answers

Which of these is NOT a potential method for gathering OSINT?

Accessing government classified documents Signup and view all the answers

In the context of OSINT, what type of information can be gathered from dating sites?

User preferences and profiles Signup and view all the answers

Which technique can be used to aggregate OSINT effectively?

Using search engines and data mining tools Signup and view all the answers

What is the purpose of Structured Threat Information eXpression (STIX)?

To standardize terminology for indicators of compromise (IoCs) Signup and view all the answers

In what format is STIX expressed?

JavaScript Object Notation (JSON) Signup and view all the answers

Which of the following is NOT a high-level STIX domain object (SDO)?

Malware Types Signup and view all the answers

Which version of STIX does the exam focus on?

STIX v2 Signup and view all the answers

What are attribute-value pairs used for in STIX?

To express structured information about IoCs Signup and view all the answers

Which of the following best describes the relationship features of STIX?

It includes ways of indicating relationships between IoCs. Signup and view all the answers

Which of the following attributes can be found in a high-level STIX domain object?

Threat Actor Name Signup and view all the answers

What aspect of STIX is emphasized in the exam preparation?

Familiarity with STIX v2 Signup and view all the answers