Security Program management and oversight 5.5

Question 1

Audits and Assessments

Answer 1

Cyber Security Audit - Examines the IT infrasutrcute, software, devices

Question 2

Internal Audits

Answer 2

Audit committee, Oversea management activities. All audits start and stop with the internal audit comittees.

Question 3

External Audits

Answer 3

Contracting a third party company to conduct audits on the

Question 5

Penetration Tests.

Answer 5

Operating system security can be circumvented by physical means. There is no security without physical security.

Question 6

Pen-testing Perspectives

Answer 6

Offensive - Red Team
Defensive - Blue Team

Question 7

Reconnaissance

Answer 7

Gathering information before the the attack.

Passive reconnaissance - Learn as much as you can from open sources. Social media, online forums, reddit

Question 8

Active Reconnaissance

Answer 8

active reconnaissance,
Visible on netwokr traffic and logs,
pings and scans
DNS Queries, OS Scan.