CYSE

NIST Framework Core Functions - CORRECT ANS Identify Protect Detect Respond Recover Identify - CORRECT ANS Develop an organizational understanding to manage cybersecurity risk to systems, people, assets, data and capabilities. Asset Management Business Environment Governance Risk Assessment Risk Management Strategy Supply Chain Risk Management Protect - CORRECT ANS Develop and implement appropriate safeguards to ensure delivery of critical services. Identify Management and Access ...

NIST Incident Response Life Cycle - CORRECT ANS PREPARATION DETECTION AND ANALYSIS CONTAINMENT, ERADICATION, and RECOVERY POST-INCIDENT ACTIVITY PREPARATION - CORRECT ANS involves establishing and training an incident response team, and acquiring the necessary tools and resources. During preparation, the organization also attempts to limit the number of incidents that will occur by selecting and implementing a set of controls based on the results of risk assessments. DETECTION AND ANALY...

What are we trying to protect in CYSE? - CORRECT ANS Confidentiality, integrity and availability (of information, systems resources etc.) What is confidentiality? - CORRECT ANS unauthorized users cannot access sensitive information What is integrity? - CORRECT ANS Information is complete and uncorrupted What is availability? - CORRECT ANS Authorized users can get to the information or resources What is vulnerability? - CORRECT ANS a flaw, weakness or hole in a system or component What i...

Which of the following would *not* be part of a solution in the Polycom case study? - CORRECT ANS d. Off site backups Which of the following is *not* true about complex and automatically generated passwords that are unique to each system and are a minimum of 30 characters in length, such as !Hs4(j0qO$&zn1%2SK38cn^!Ks620! ? - CORRECT ANS b. Brute force password crackers will break them as quickly as a 4-digit PIN Which of the following is true regarding the history of cybersecurity as prese...

How does a spear phishing attack differ from a general phishing attack? whether message has embedded javascript or not size of the message number of targets and custom messages whether message has malware attached or not - CORRECT ANS number of targets and custom messages Is it OK to use the same password for all of our accounts? yes because using different passwords is hard to remember no because a compromise of one account leads to a compromise of all accounts using the same password ...