Question 1

When the Office of Personnel Management was hacked, all of the following are true EXCEPT:

Accepted Answer

A)   The hackers gained access to the building to steal the records
B)   It took the Office of Personnel Management many months to detect the break-in
C)   The hackers likely exploited a stolen password
D)   The hackers did not need to escape in the blue turbocharged vehicle
E)   None of the above (indicating that all are true)

Question 2

What is a challenge question?

Accepted Answer

A challenge question, also known as a se...

Question 3

Who is responsible for decisions about security strategy?

Accepted Answer

A)   IT people
B)   Shared: IT leaders and business leaders
C)   Business leaders
D)   Consultants
E)   Team of consultants and IT people

Question 4

Explain the importance of creating a cybersecurity culture and give examples of major symptoms of improper decisions.

Accepted Answer

Creating a cybersecurity culture within ...

Question 5

If you receive an email from your son, and the body of the email tells you to open an attachment because it is funny, the risk is pretty close to zero because it came from your son.

Accepted Answer

A) True 
 B)False

Question 6

It is estimated that ___ % of all firms have been breached.

Accepted Answer

A)   5% or less
B)   10% to 20%
C)   40% to 60%
D)   70% to 90%
E)   Over 95%

Question 7

____________is a piece of software that traps keystrokes and stores them for hackers to inspect later?

Accepted Answer

The answer of ____________is a piece of software that traps...

Question 8

It usually takes ____ for someone in a firm to discover a security compromise in a system, after the evidence shows up in logs or alerts

Accepted Answer

A)   Several seconds
B)   Several minutes
C)   Several hours
D)   Several days
E)   Several months

Question 9

Which of the following are popular types of multifactor authentication?

Accepted Answer

A)   Knowledge, ownership, biometric
B)   VPN, biometric, text message
C)   Encryption, ownership, WEP/WPA
D)   Firewall, antispy/virus software, knowledge
E)   Biometric, system logs, transmission tools

Question 10

All of the following are classic signs of a phishing message EXCEPT:

Accepted Answer

A)   Your email in-box is full and you must click on a link to increase storage
B)   You just won a lottery or contest, and you need to click on a link to claim your prize
C)   Poor grammar or spelling in a note that purports to be from a large company
D)   Goods or services are offered at an impossibly low price
E)   An emailed ad that oddly does not provide any active links

Question 11

In the Anthem Blue Cross breach, where 80 million names, birthdays, social security numbers, etc., were stolen, the hackers got in by:

Accepted Answer

A)   Breaking into the building where they were stored
B)   Obtaining passwords of five or more high-level employees
C)   Making phone calls to insiders posing as IT people needing to log into their accounts
D)   Emailing each of the 80 million patients asking for their private information
E)   Recovering patient records from a large recycling bin

Question 12

Cyber culture and behavior are defined by attitudes, beliefs, and____________ .

Accepted Answer

The answer of Cyber culture and behavior are defined by...

Question 13

What is Poulsen's Law?

Accepted Answer

Information is secur...

Question 14

According to the late L. Dain Gary, "You cannot make a computer secure."

Accepted Answer

A) True 
 B)False

Question 15

The deep web is a part of the internet that includes unindexed websites offering both legal and illegal items, such as passports, citizenship, and even murders for hire.

Accepted Answer

A) True 
 B)False

Question 16

The Deep Web is reputed to be 400 times larger than the public web.

Accepted Answer

A) True 
 B)False

Question 17

Continuous monitoring for anomalies and unplanned events is part of the____________ function of the NIST CSF.

Accepted Answer

The answer of Continuous monitoring for anomalies and unplanned events...

Question 18

Cybersecurity is more about management actions than technology decisions.

Accepted Answer

A) True 
 B)False

Question 19

On the black market, stolen data in a "kit" that contains credit card information plus social security number and medical information is worth:

Accepted Answer

A)   between $13 and $18 per record
B)   between $43 and 65 per record
C)   between $148 and $408 per record
D)   between $100 and $1,000 per record
E)   between $4,520 and $4,580 per record

Question 20

Internal threats are considered the most lethal threat. What are they, why are they so lethal, and what can a company do to protect against them?

Accepted Answer

Internal threats refer to security risks...

Exam 8: Security

Explain the importance of creating a cybersecurity culture and give examples of major symptoms of improper decisions.

Correct AnswerAnswered by ExamLex AICreating a cybersecurity culture within ...View AnswerShow Answer

When the Office of Personnel Management was hacked, all of the following are true EXCEPT:

Correct AnswerverifiedShow Answer

The deep web is a part of the internet that includes unindexed websites offering both legal and illegal items, such as passports, citizenship, and even murders for hire.

Correct AnswerverifiedShow Answer

It usually takes ____ for someone in a firm to discover a security compromise in a system, after the evidence shows up in logs or alerts

Correct AnswerverifiedShow Answer

In the Anthem Blue Cross breach, where 80 million names, birthdays, social security numbers, etc., were stolen, the hackers got in by:

Correct AnswerverifiedShow Answer

All of the following are classic signs of a phishing message EXCEPT:

Correct AnswerverifiedShow Answer

What is Poulsen's Law?

Correct AnswerverifiedInformation is secur...View AnswerShow Answer

Which of the following are popular types of multifactor authentication?

Correct AnswerverifiedShow Answer

What is a challenge question?

Correct AnswerAnswered by ExamLex AIA challenge question, also known as a se...View AnswerShow Answer

If you receive an email from your son, and the body of the email tells you to open an attachment because it is funny, the risk is pretty close to zero because it came from your son.

Correct AnswerverifiedShow Answer

Continuous monitoring for anomalies and unplanned events is part of the____________ function of the NIST CSF.

Correct AnswerverifiedShow Answer

Cyber culture and behavior are defined by attitudes, beliefs, and____________ .

Correct AnswerverifiedShow Answer

Who is responsible for decisions about security strategy?

Correct AnswerverifiedShow Answer

On the black market, stolen data in a "kit" that contains credit card information plus social security number and medical information is worth:

Correct AnswerverifiedShow Answer

The Deep Web is reputed to be 400 times larger than the public web.

Correct AnswerverifiedShow Answer

Internal threats are considered the most lethal threat. What are they, why are they so lethal, and what can a company do to protect against them?

Correct AnswerAnswered by ExamLex AIInternal threats refer to security risks...View AnswerShow Answer

Cybersecurity is more about management actions than technology decisions.

Correct AnswerverifiedShow Answer

According to the late L. Dain Gary, "You cannot make a computer secure."

Correct AnswerverifiedShow Answer

____________is a piece of software that traps keystrokes and stores them for hackers to inspect later?

Correct AnswerverifiedShow Answer

It is estimated that ___ % of all firms have been breached.

Correct AnswerverifiedShow Answer

Correct Answer
Answered by ExamLex AI
Creating a cybersecurity culture within ...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Information is secur...
View Answer

Correct Answer
verified

Correct Answer
Answered by ExamLex AI
A challenge question, also known as a se...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
Answered by ExamLex AI
Internal threats refer to security risks...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified