Review Questions 1 SYS701

Matt is updating the organization's threat assessment process. What category of control is Matt implementing?

Jade's organization recently suffered a security breach affecting stored credit card data and is now subject to sanctions for violating the Payment Card Industry Data Security Standard (PCI DSS). What category of risk is concerning Jade?

Chris is responding to a security incident that compromised one of his organization's web servers. He believes that the attackers defaced one or more pages on the website. What cybersecurity objective did this attack violate?

Tonya is concerned about the risk that an attacker will attempt to gain access to her organization's database server. She is searching for a control that would discourage the attacker from attempting to gain access. What type of security control is she seeking to implement?

Greg is implementing a Data Loss Prevention (DLP) system and wants to protect against sensitive information transmitted by guests on the wireless network. Which DLP technology would best meet this goal?

What term best describes data that is being sent between two systems over a network connection?

Tina is tuning her organization's Intrusion Prevention System (IPS) to prevent false positive alerts. What type of control is Tina implementing?

Tony is reviewing the status of his organization's defenses against a breach of their file server. He believes that a compromise of the file server could reveal information that would prevent the company from continuing to do business. What term best describes the risk that Tony is considering?

Which data element is LEAST likely to be directly associated with identity theft?

Which term best describes an organization's desired security posture?

A 'Beware of Dogs' sign is placed on a datacenter fence. What control type does this exemplify?

Which technology uses mathematical algorithms to render information unreadable without the correct key?

An organization doesn't use full-disk encryption on laptops, resulting in what type of control gap?

Which compliance regulation most directly affects the operations of a health-care provider?

Nolan is writing an after action report on a security breach that took place in his organization. The attackers stole thousands of customer records from the organization's database. What cybersecurity principle was most impacted in this breach?

Which one of the following objectives is not one of the three main objectives that information security professionals must achieve to protect their organizations against cybersecurity threats?

Which one of the following data protection techniques is reversible when conducted properly?

Which one of the following statements is not true about compensating controls under PCI DSS?

Operational control

Compliance risk

Integrity in cybersecurity

Data masking

Deterrent security control

Network-based DLP

Data in transit

Technical control

Strategic Risk

Identity Theft Element

Desired Security State

Deterrent Control

Data Encryption

Control Gap

HIPAA Compliance

Confidentiality Principle