CC Free Practice Test

What is the primary goal of a risk management process in cybersecurity?

1. A. to eliminate all cybersecurity risks
2. B. to transfer all cybersecurity risks to a third party
3. C. to identify, assess, and mitigate cybersecurity risks to an acceptable level (Correct)
4. D. to ignore cybersecurity risks and focus on incident response

Correct Answer: C

Networks are often micro segmented networks, with firewalls at nearly every connecting point

1. A. DMZ
2. B. VPN
3. C. VLAN
4. D. Zero Trust

Correct Answer: A

What is the purpose of the post incident phase of incident response?

1. A. To detect and analyze incidents
2. B. To prepare for future incidents
3. C. To document lessons learned and improve future incident response effectiveness
4. D. To containment and eradicate incidents

Correct Answer: C

What is the most important aspect of security awareness/training?

1. A. Maximizing business capabilities
2. B. Protecting assets
3. C. Protecting health and human safety
4. D. Ensuring the confidentiality of data

Correct Answer: C

Measure of the extent to which an entity is threatened by a potential circumstance or event and likelihood of occurrence

1. A. Impact
2. B. Risk
3. C. Threat
4. D. Threat Vector

Correct Answer: B