Failure to comply with government regulations or laws for cyber security can lead to:

Loss of confidence in the organization

Civil liability

Criminal prosecution

All of the above

Cyber security should be viewed as a risk management problem because:

It is less expensive than using specialized cyber workers

Absolute protection cannot be guaranteed

Both answers above

None of the above

Which of the following is not considered a factor in determining cyber risk?

The likelihood of a threat happening

The vulnerability of the organization to the threat

The cost to mitigate or recover from the threat

The duration of the threat event

Social engineering uses which aspects of human nature?

Trust manipulation

Desire to be helpful

Lack of understanding

All of the above

Redundant computer servers would be an example of which type of security measure?

Detective

Corrective

Preventative

Deterrent

With regards to BYOD (Bring Your Own Device) it is usually safest and cost-effective to:

Disallow BYOD altogether

Allow BYOD in accordance with a specified policy

Allow BYOD only if a Mobile Device Management (MDM) tool is available

Limit BYOD to quarantined or isolated networks

Which of the following is true for an Advanced Persistent Threat (APT)?

They are easily detected by anti-virus software

They seek targets of opportunity as opposed to specific organizations

They evade detection by re-encrypting or repackaging their code

All of the above

Behavior-based intrusion detection is an improvement compared to rule-based because:

It decreases the number of false positives, especially early in deployment

It requires establishing baseline behavior

It examines all out-of-the-normal cases, not just ones specified in a script

All of the above

Unlock and Upgrade