IAS102

Question 1

INCLUDES HIGHLY SPECIALIZED REVIEW AND EVALUATION OF INCOMING CYBERSECURITY INFORMATION TO DETERMINE IF IT IS USEFUL FOR INTELLIGENCE.

Answer 1

ANALYZE

Question 2

THIS GROUP OF CRIMINALS BREAKS INTO COMPUTERS OR NETWORKS TO GAIN ACCESS FOR VARIOUS REASONS.

Answer 2

HACKERS

Question 3

TEENAGERS OR HOBBYISTS MOSTLY LIMITED TO PRANKS AND VANDALISM, HAVE LITTLE OR NO SKILL, OFTEN USING EXISTING TOOLS OR INSTRUCTIONS FOUND ON THE INTERNET TO LAUNCH ATTACKS.

Answer 3

SCRIPT KIDDIES

Question 4

INVOLVE IDENTIFYING, ASSESSING AND CONTROLLING RISKS TO AN ORGANIZATIONS CAPITAL, EARNINGS, AND CRITICAL ASSETS

Answer 4

SECURITY AND RISK MANAGEMENT

Question 5

REFERS TO PROTECTING INFORMATION FROM UNAUTHORIZED ACCESS

Answer 5

CONFIDENTIALITY

Question 6

ALIGN SECURITY EFFORTS WITH THE OVERALL BUSINESS STRATEGY.

Answer 6

STRATEGY

Question 7

ENSURE COMPLIANCE WITH RELEVANT REGULATIONS, STANDARDS AND POLICIES

Answer 7

CONFORMANCE

Question 8

A SELF-CONTAINED PROGRAM THAT REPLICATES ITSELF AND SPREADS ITS COPIES TO OTHER COMPUTERS.

Answer 8

WORM

Question 9

TYPE OF Cyber attack THAT USES EMAIL, SMS, PHONE, SOCIAL MEDIA, SOCIAL ENGINEERING TECHNIQUES TO ENTICE A VICTIM TO SHARE SENSITIVE INFORMATION- SUCH AS PASSWORDS OR ACCOUNT NUMBERS.

Answer 9

PHISHING

Question 10

A TECHNIQUE THROUGH WHICH A CYBER CRIMINAL DISGUISES THEMSELVES AS A KNOWN OR TRUSTED SOURCE

Answer 10

SPOOFING

Question 11

POSSESS THE INSIGHT TO RECOGNIZE THE INFLUENCE OF DATA AND HARNESS THAT POWER TO BUILD GREAT ORGANIZATIONS, PROVIDE SERVICES AND PROTECT PEOPLE FROM CYBER ATTACKS.

Answer 11

CYBERSECURITY SPECIALISTS

Question 12

GREY HAT HACKERS WHO ATTEMPT TO DISCOVER EXPLOITS AND REPORT THEM TO VENDORS, SOMETIMES FOR PRIZES OR REWARDS.

Answer 12

VULNERABILITY BROKERS

Question 13

DEPENDING ON A PERSON’S PERSPECTIVE, THESE ARE EITHER WHITE HAT OR BLACK HAT HACKERS WHO STEAL GOVERNMENT SECRETS, GATHER INTELLIGENCE, AND SABOTAGE NETWORKS.

Answer 13

STATE SPONSORED HACKERS

Question 14

ATTACKERS BREAK INTO NETWORKS OR COMPUTER SYSTEMS TO DISCOVER WEAKNESSES IN ORDER TO IMPROVE THE SECURITY OF THESE SYSTEMS

Answer 14

WHITE HAT ATTACKERS

Question 15

THE RESULT OF DATA SETS THAT ARE LARGE AND COMPLEX, MAKING TRADITIONAL DATA PROCESSING APPLICATIONS INADEQUATE

Answer 15

IMPACT OF BIG DATA

Question 16

MEANS DATA ARE TRUSTWORTHY, COMPLETE AND HAVE NOT BEEN ACCIDENTALLY ALTERED OR MODIFIED BY AN UNAUTHORIZED USER.

Answer 16

INTEGRITY

Question 17

MEANS DATA ARE ACCESSIBLE WHEN YOU NEED THEM

Answer 17

AVAILABILITY

Question 18

CATEGORIES OF CYBERSECURITY WORK

Answer 18

1) OPERATE AND MAINTAIN
2) PROTECT AND DEFEND
3) INVESTIGATE
4) COLLECT AND OPERATE
5) ANALYZE
6) OVERSIGHT AND DEVELOPMENT
7) SECURELY PROVISION

Question 19

SECURITY GOVERNANCE KEY PRINCIPLES

Answer 19

1) RESPONSIBILITY
2) STRATEGY
3) ACQUISITION
4) PERFORMANCE
5) CONFORMANCE
6) HUMAN BEHAVIOR

Question 20

A PROCESS USED IN INFORMATION SECURITY TO CATEGORIZE DATA BASED ON ITS LEVEL OF SENSITIVITY AND IMPORTANCE

Answer 20

INFORMATION CLASSIFICATION

Question 21

INVOLVES RESPONSIBILITY FOR THE MAINTENANCE, OPERATIONS, AND SECURITY OF A SPECIFIC IT SYSTEM.

Answer 21

SYSTEM OWNERSHIP

Question 22

WHEN DATA OWNERSHIP IS CLEARLY ASSIGNED, THE DESIGNATED OWNER TAKES RESPONSIBILITY FOR MAINTAINING DATA ACCURACY, COMPLETENESS AND CONSISTENCY.

Answer 22

DATA QUALITY AND INTEGRITY

Question 23

IN MANDATES STRICT CONSENT REQUIREMENTS AND GIVES INDIVIDUALS THE RIGHT TO ACCESS AND DELETE THEIR DATA

Answer 23

GENERAL DATA PROTECTION REGULATION (GDRP)

Question 24

COMPANIES MAY USE PERSONAL DATA FOR PURPOSES BEYOND WHAT USERS CONSENTED TO, SUCH AS TARGETED ADVERTISING OR SELLING DATA TO THIRD PARTIES.

Answer 24

DATA MISUSE

Question 25

UNAUTHORIZED ACCESS TO PERSONAL DATA CAN LEAD TO IDENTIFY THEFT, FINANCIAL LOSS, AND PRIVACY VIOLATIONS

Answer 25

DATA BREACHES

Question 26

GOVERNMENTS AND ORGANIZATIONS MAY MONITOR INDIVIDUALS ACTIVITIES, RAISING CONCERNS ABOUT PRIVACY AND CIVIL LIBERTIES

Answer 26

SURVEILLANCE

Question 27

REFERS TO THE DESIGNATION OF AUTHORITY OVER SPECIFIC SETS OF DATA.

Answer 27

OWNERSHIP

Question 28

THIS MAY SEEM EASY, BUT WHEN WE TALK ABOUT INFORMATION IN HIGH VOLUME, VARIETY AND IMPORTANCE, CARRYING OUT THIS TASK BECOMES A LOT MORE COMPLEX.

Answer 28

CLASSIFIED INFORMATION

Question 29

ENSURES THE SYSTEM RUNS SMOOTHLY, IS UPDATED REGULARLY AND IS PROTECTED AGAINST SECURITY THREATS.

Answer 29

SYSTEM OWNER

Question 30

THIS LAW GIVES California RESIDENTS THE RIGHT TO KNOW WHAT PERSONAL DATA IS BEING COLLECTED ABOUT THEM, TO WHOM IT IS BEING SOLD, AND THE ABILITY TO ACCESS AND DELETE THEIR DATA

Answer 30

CALIFORNIA CONSUMER PRIVACY ACT (CCPA)

Question 31

DATA OWNERS CAN MONITOR DATA USAGE, IMPLEMENT NECESSARY SECURITY MEASURES, AND ENSURE COMPLIANCE WITH LEGAL OBLIGATIONS, MITIGATING RISKS ASSOCIATED WITH DATA BREACHES AND NON-COMPLIANCE

Answer 31

COMPLIANCE AND REGULATORY REQUIREMENTS

Question 32

IN 2024, WHO ISSUED AN EXECUTIVE ORDER TO PROTECT AMERICAN'S SENSITIVE PERSONAL DATA FROM EXPLOITATION BY COUNTRIES OF CONCERN

Answer 32

PRESIDENT BRIDEN

Question 33

INFORMATION THAT IS EXTREMELY SENSITIVE AND REQUIRES THE HIGHEST LEVEL OF PROTECTION AND SHOULD ONLY BE SHARED WITH A SELECT GROUP OF AUTHORIZED INDIVIDUALS

Answer 33

SECRET

Question 34

THIS SYSTEM CAN USE NUMERIC OR ALPHABETIC ORDER, AS LONG AS ITS EASY TO UNDERSTAND AND FOLLOW

Answer 34

LABELING SYSTEM

Question 35

INFORMATION THAT IS NOT SENSITIVE AND CAN BE SHARED FREELY WITH ANYONE

Answer 35

PUBLIC

Question 36

INFORMATION THAT IF DISCLOSED WOULD CAUSE EXCEPTIONALLY GRAVE DAMAGE TO THE NATIONAL SECURITY AND ACCESS TO THIS INFORMATION IS RESTRICTED TO A VERY SMALL NUMBER OF AUTHORIZED INDIVIDUALS WITH A NEED-TO-KNOW.

Answer 36

TOP SECRET

Question 37

IT ESTABLISHES ROLES, RESPONSIBILITIES, AND DECISION-MAKING AUTHORITY, ENABLING ORGANIZATIONS TO DEFINE AND ENFORCE DATA-RELATED POLICIES, STANDARDS, AND PROCESSES

Answer 37

DATA GOVERNANCE FRAMEWORK

Question 38

INFORMATION THAT HAS RESTRICTED ACCESS AS PER LAW OR REGULATIONS

Answer 38

CLASSIFIED INFORMATION

Question 39

INFORMATION THAT IS SENSITIVE BUT NOT CRITICAL, AND SHOULD ONLY BE SHARED WITHIN THE ORGANIZATION

Answer 39

INTERNAL

Question 40

PROTECTS SENSITIVE HEALTH INFORMATION FROM BEING DISCLOSED WITHOUT THE PATIENTS CONSENT OR KNOWLEDGE

Answer 40

HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA)

Question 41

MEASURES TO PROTECT PERSONAL DATA

Answer 41

1) ENCRYPTION 2) ACCESS CONTROL 3) REGULAR AUDITS 4) USER EDUCATION

Question 42

ASSIGNING VALUE TO THE INFORMATION ASSETS

Answer 42

1) PUBLIC INFORMATION 2) INTERNAL INFORMATION 3) RESTRICTED INFORMATION 4) CLASSIFIED INFORMATION 5) CONFIDENTIAL INFORMATION