Question 1

Which of the following can achieve authentication in information security?

Accepted Answer

A)  Intrusion detection systems 
B)  Log files 
C)  Auditing 
D)  Tokens 
A)  Intrusion detection systems 
B)  Log files 
C)  Auditing 
D)  Tokens D

Question 2

Which of the following statements best describes NIST?

Accepted Answer

A)  A regulatory government organization that enforces standards 
B)  A coalition of over 160 countries that creates standards 
C)  A nonregulatory federal agency that develops and promotes standards 
D)  A nongovernment organization that develops and promotes standards 
A)  A regulatory government organization that enforces standards 
B)  A coalition of over 160 countries that creates standards 
C)  A nonregulatory federal agency that develops and promotes standards 
D)  A nongovernment organization that develops and promotes standards C

Question 3

Which of the following is not one of the "Five A's" of information security?

Accepted Answer

A)  Availability 
B)  Assurance 
C)  Authorization 
D)  Authentication 
A)  Availability 
B)  Assurance 
C)  Authorization 
D)  Authentication A

Question 4

CVSS is short for which of the following?

Accepted Answer

A)  Confidential Vulnerability Secure System 
B)  Common Vulnerability Secure System 
C)  Common Vulnerability Scoring System 
D)  Confidential Vulnerability Scoring System 
A)  Confidential Vulnerability Secure System 
B)  Common Vulnerability Secure System 
C)  Common Vulnerability Scoring System 
D)  Confidential Vulnerability Scoring System

Question 5

Which of the following best describes the accountability key information security principle?

Accepted Answer

A)  The logging of access and usage of information resources 
B)  The configuring of the Security log to record events 
C)  The process of tracing actions to their source 
D)  The process of identifying users who seek access to secure information 
A)  The logging of access and usage of information resources 
B)  The configuring of the Security log to record events 
C)  The process of tracing actions to their source 
D)  The process of identifying users who seek access to secure information

Question 6

The ISO 27002 standard has its origins in which of the following countries?

Accepted Answer

A)  France 
B)  United States 
C)  Germany 
D)  Great Britain 
A)  France 
B)  United States 
C)  Germany 
D)  Great Britain

Question 7

Which of the following best describes the accounting key information security principle?

Accepted Answer

A)  The logging of access and usage of information resources 
B)  The configuring of the Security log to record events 
C)  The process of tracing actions to their source 
D)  The process of identifying users who seek access to secure information 
A)  The logging of access and usage of information resources 
B)  The configuring of the Security log to record events 
C)  The process of tracing actions to their source 
D)  The process of identifying users who seek access to secure information

Question 8

Which of the following refers to a computer used in a DDoS attack?

Accepted Answer

A)  Botnet 
B)  Victim 
C)  Bot 
D)  Handler 
A)  Botnet 
B)  Victim 
C)  Bot 
D)  Handler

Question 9

Which of the following refers to those responsible for implementing, maintaining, and monitoring safeguards and systems?

Accepted Answer

A)  Network engineers 
B)  System administrators 
C)  Webmasters 
D)  All of the above 
A)  Network engineers 
B)  System administrators 
C)  Webmasters 
D)  All of the above

Question 10

Which of the following is an example of a security mechanism designed to preserve confidentiality?

Accepted Answer

A)  Controlled traffic routing 
B)  Logical and physical access controls 
C)  Database views 
D)  All of the above 
A)  Controlled traffic routing 
B)  Logical and physical access controls 
C)  Database views 
D)  All of the above

Question 11

Which of the following refers to the requirement that private or confidential information not be disclosed to unauthorized individuals?

Accepted Answer

A)  Availability 
B)  Confidentiality 
C)  Integrity 
D)  Control 
A)  Availability 
B)  Confidentiality 
C)  Integrity 
D)  Control

Question 12

Which of the following is a monitoring control that safeguards against the loss of integrity?

Accepted Answer

A)  File integrity monitoring 
B)  Separation of duties 
C)  Encryption 
D)  Digital signatures 
A)  File integrity monitoring 
B)  Separation of duties 
C)  Encryption 
D)  Digital signatures

Question 13

Which of the following key information security principles grants users and systems a predetermined level of access to information resources?

Accepted Answer

A)  Assurance 
B)  Authentication 
C)  Authorization 
D)  Accountability 
A)  Assurance 
B)  Authentication 
C)  Authorization 
D)  Accountability

Question 14

Which of the following is a behavioral control that can be used to safeguard against the loss of integrity?

Accepted Answer

A)  Rotation of duties 
B)  Log analysis 
C)  Code testing 
D)  Digital signatures 
A)  Rotation of duties 
B)  Log analysis 
C)  Code testing 
D)  Digital signatures

Question 15

Which of the following are the three elements of the CIA triad?

Accepted Answer

A)  Authentication, integrity, confidentiality 
B)  Availability, integrity, confidentiality 
C)  Access, integrity, confidentiality 
D)  Authorization, integrity, confidentiality 
A)  Authentication, integrity, confidentiality 
B)  Availability, integrity, confidentiality 
C)  Access, integrity, confidentiality 
D)  Authorization, integrity, confidentiality

Question 16

Which of the following is the official publication series for NIST standards and guidelines?

Accepted Answer

A)  ITL bulletins 
B)  FIPS 
C)  Special Publication 800 series 
D)  NIST Internal or Interagency reports 
A)  ITL bulletins 
B)  FIPS 
C)  Special Publication 800 series 
D)  NIST Internal or Interagency reports

Question 17

Which of the following NIST publications focuses on cybersecurity practices and guidelines?

Accepted Answer

A)  Special Publication 1800 series 
B)  FIPS 
C)  ITL bulletins 
D)  NIST Internal or Interagency reports 
A)  Special Publication 1800 series 
B)  FIPS 
C)  ITL bulletins 
D)  NIST Internal or Interagency reports

Question 18

Which of the following key information security principles traces actions to their source?

Accepted Answer

A)  Accountability 
B)  Assurance 
C)  Authorization 
D)  Accounting 
A)  Accountability 
B)  Assurance 
C)  Authorization 
D)  Accounting

Question 19

Which of the following is a network of the national standards institutes of more than 160 countries?

Accepted Answer

A)  ISO 
B)  NIST 
C)  FIPS 
D)  IEC 
A)  ISO 
B)  NIST 
C)  FIPS 
D)  IEC

Question 20

Which of the following is a collective term given to guidance on topics related to information systems security, predominantly regarding the planning, implementing, managing, and auditing of overall information security practices?

Accepted Answer

A)  Service level agreements 
B)  Security framework 
C)  "Five A's" of information security 
D)  CIA security model 
A)  Service level agreements 
B)  Security framework 
C)  "Five A's" of information security 
D)  CIA security model

Which of the following can achieve authentication in information security?

Which of the following statements best describes NIST?

Which of the following is not one of the "Five A's" of information security?

CVSS is short for which of the following?

Which of the following best describes the accountability key information security principle?

The ISO 27002 standard has its origins in which of the following countries?

Which of the following best describes the accounting key information security principle?

Which of the following refers to a computer used in a DDoS attack?

Which of the following refers to those responsible for implementing, maintaining, and monitoring safeguards and systems?

Which of the following is an example of a security mechanism designed to preserve confidentiality?

Which of the following refers to the requirement that private or confidential information not be disclosed to unauthorized individuals?

Which of the following is a monitoring control that safeguards against the loss of integrity?

Which of the following key information security principles grants users and systems a predetermined level of access to information resources?

Which of the following is a behavioral control that can be used to safeguard against the loss of integrity?

Which of the following are the three elements of the CIA triad?

Which of the following is the official publication series for NIST standards and guidelines?

Which of the following NIST publications focuses on cybersecurity practices and guidelines?

Which of the following key information security principles traces actions to their source?

Which of the following is a network of the national standards institutes of more than 160 countries?

Which of the following is a collective term given to guidance on topics related to information systems security, predominantly regarding the planning, implementing, managing, and auditing of overall information security practices?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters

Exam 3: Cybersecurity Framework

Which of the following can achieve authentication in information security?

Which of the following statements best describes NIST?

Which of the following is not one of the "Five A's" of information security?

CVSS is short for which of the following?

Which of the following best describes the accountability key information security principle?

The ISO 27002 standard has its origins in which of the following countries?

Which of the following best describes the accounting key information security principle?

Which of the following refers to a computer used in a DDoS attack?

Which of the following refers to those responsible for implementing, maintaining, and monitoring safeguards and systems?

Which of the following is an example of a security mechanism designed to preserve confidentiality?

Which of the following refers to the requirement that private or confidential information not be disclosed to unauthorized individuals?

Which of the following is a monitoring control that safeguards against the loss of integrity?

Which of the following key information security principles grants users and systems a predetermined level of access to information resources?

Which of the following is a behavioral control that can be used to safeguard against the loss of integrity?

Which of the following are the three elements of the CIA triad?

Which of the following is the official publication series for NIST standards and guidelines?

Which of the following NIST publications focuses on cybersecurity practices and guidelines?

Which of the following key information security principles traces actions to their source?

Which of the following is a network of the national standards institutes of more than 160 countries?

Which of the following is a collective term given to guidance on topics related to information systems security, predominantly regarding the planning, implementing, managing, and auditing of overall information security practices?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters