Lecture 13

Question 1

What is a risk in cybersecurity?

Answer 1

Risk is the probability of something bad happening, calculated as Risk = Likelihood × Impact.

Understanding risk is essential for effective cybersecurity management.

Question 2

What are the four steps of risk management?

Answer 2

Identification, Assessment, Prioritization, and Mitigation/Monitoring.

These steps help organizations systematically manage risks.

Question 3

What are the four risk handling strategies?

Answer 3

Avoidance, Mitigation, Transference, and Acceptance.

Each strategy addresses risk in different ways.

Question 4

What is the difference between pentesting and vulnerability management (VM)?

Answer 4

Pentesting simulates an attack from the outside, while VM assesses vulnerabilities from within the system.

Both are essential for a comprehensive security posture.

Question 5

What does SOC stand for, and what are its functions?

Answer 5

Security Operations Center (SOC) is responsible for detection, incident response, threat intelligence, and vulnerability management.

SOCs play a crucial role in maintaining organizational security.

Question 6

What are the four phases of incident management?

Answer 6

Preparation, Detection & Analysis, Containment & Recovery, and Post-Incident Activity.

These phases ensure effective response to security incidents.

Question 7

Define Threat Intelligence in cybersecurity.

Answer 7

The collection, analysis, and dissemination of information about potential or ongoing cyber threats.

Threat intelligence is vital for proactive security measures.

Question 8

What is the intelligence cycle in cybersecurity?

Answer 8

Direction → Collection → Analysis → Production → Dissemination & Feedback.

This cycle helps in systematic threat intelligence operations.

Question 9

What are common security tools used in cybersecurity operations?

Answer 9

SIEM (Security Information and Event Management) and EDR (Endpoint Detection and Response).

These tools help in monitoring and responding to security threats.

Question 10

What is the role of AI in cybersecurity?

Answer 10

AI is used for anomaly detection, social engineering attacks, vulnerability identification, and threat automation.

AI enhances the efficiency and effectiveness of cybersecurity measures.