Module 3-01 Challenge

Question 1

What are some of the primary purposes of security frameworks? Select four answers.

• Securing financial information
• Safeguarding specific individuals
• Aligning security with business goals
• Identifying security weaknesses
• Protecting PII data

Answer 1

• Securing financial information
• Aligning security with business goals
• Identifying security weaknesses
• Protecting PII data

Question 2

Which of the following are core components of security frameworks? Select four answers.

• Implementing security processes
• Establishing regulatory compliance measures
• Monitoring personally identifiable information
• Setting guidelines to achieve security goals
• Monitoring and communicating results
• Identifying and documenting security goals

Answer 2

• Implementing security processes
• Setting guidelines to achieve security goals
• Monitoring and communicating results
• Identifying and documenting security goals

Question 3

A security professional implements encryption and multi-factor authentication (MFA) to better protect customers’ private data. This is an example of using _____.

• organizational upgrades
• security teams
• networking regulations
• security controls

Answer 3

security controls

Question 4

You are helping your security team consider risk when setting up a new software system. Using the CIA triad, you focus on confidentiality, integrity, and what else?

• Applications
• Availability
• Accuracy
• Activity

Answer 4

Availability

Question 5

_____ are items perceived as having value to an organization.

• Lifecycles
• Alerts
• Incidents
• Assets

Answer 5

Assets

Question 6

Which of the following statements accurately describe the NIST CSF? Select all that apply.

• Security teams use it as a baseline to manage risk.
• It is only effective at managing long-term risk.
• Its purpose is to help manage cybersecurity risk.
• It consists of standards, guidelines, and best practices.
• It is a voluntary framework.

Answer 6

• Security teams use it as a baseline to manage risk.
• Its purpose is to help manage cybersecurity risk.
• It consists of standards, guidelines, and best practices.
• It is a voluntary framework.

Question 7

Some of the most dangerous threat actors are _____ because they often know where to find sensitive information, can access it, and may have malicious intent.

• dissatisfied customers
• past vendors
• senior partners
• disgruntled employees

Answer 7

disgruntled employees

Question 8

A security professional is updating software on a coworker’s computer and happens to see a very interesting email about another employee. The security professional chooses to follow company guidelines with regards to privacy protections and does not share the information with coworkers. Which concept does this scenario describe?

• Preserving evidence
• Security ethics
• Security controls
• Business email compromise

Answer 8

Security ethics

Question 9

Which ethical principle describes safeguarding personal information from unauthorized use?

• Non-bias
• Honesty
• Incident investigation
• Privacy protection

Answer 9

Privacy protection

Question 10

Which ethical principle describes the rules that are recognized by a community and enforced by a governing entity?

• Laws
• Restrictions
• Guidelines
• Protections

Answer 10

Laws

Question 11

What are some of the primary purposes of security frameworks? Select three answers.

• Protecting PII data
• Identifying security weaknesses
• Managing organizational risks
• Safeguarding specific individuals

Answer 11

• Protecting PII data
• Identifying security weaknesses
• Managing organizational risks

Question 12

A security professional has been tasked with implementing strict password policies on workstations to reduce the risk of password theft. This is an example of _____.

• hardware changes
• security teams
• networking regulations
• security controls

Answer 12

security controls

Question 13

A key aspect of the CIA triad is ensuring that only _____ can access specific assets.

• business competitors
• social media sites
• authorized users
• internet providers

Answer 13

authorized users

Question 14

A security professional working at a bank is running late for a meeting. They consider saving time by leaving files on their desk that contain client account numbers. However, after thinking about company guidelines with regards to compliance, the security professional takes the time to properly store the files. Which concept does this scenario describe?

• Security ethics
• Preserving evidence
• Security controls
• Public finance

Answer 14

• Security ethics

Question 15

The ethical principle of _____ involves safeguarding a company database that contains sensitive information about employees.

• unrestricted access
• non-bias
• privacy protection
• honesty

Answer 15

privacy protection

Question 16

You are a security professional working for a state motor vehicle agency that stores drivers’ national identification numbers and banking information. Which ethical principle involves adhering to rules that are intended to protect these types of data?

• Restrictions
• Investigations
• Guidelines
• Laws

Answer 16

Laws

Question 17

For what reasons might disgruntled employees be some of the most dangerous threat actors? Select two answers.

• They have advanced technical skills.
• They are less productive than other employees.
• They know where to find sensitive information.
• They have access to sensitive information.

Answer 17

• They know where to find sensitive information.
• They have access to sensitive information.

Question 18

A security professional overhears two employees discussing an exciting new product that has not been announced to the public. The security professional chooses to follow company guidelines with regards to confidentiality and does not share the information about the new product with friends. Which concept does this scenario describe?

• Data encryption
• Preserving evidence
• Security ethics
• Security controls

Answer 18

Security ethics