What is the formula for calculating risk in cybersecurity?

Risk = Threat x Vulnerability x Asset Value

Risk = Threat - Vulnerability + Asset Value

Risk = Threat + Vulnerability + Asset Value

Risk = Asset Value / (Threat x Vulnerability)

What is the difference between a vulnerability and a threat?

A vulnerability is a weakness; a threat is the actor or event that could exploit it

A vulnerability is an attacker; a threat is the software flaw

A vulnerability is external; a threat is internal only

They are the same thing and can be used interchangeably

In asset classification, what does the 'Confidentiality' criterion measure?

How sensitive the data is and the impact if disclosed to unauthorized parties

The number of employees who can access the asset

The physical weight and size of the asset

The speed at which the asset can be replaced

Why does asset standardization improve security?

It reduces the number of distinct systems that must be patched, monitored, and understood

It allows every department to use different hardware and software

It makes replacement parts harder to find during incidents

It increases the number of vendors the organization must manage

Why is simply deleting files or reformatting a drive insufficient when disposing of storage media?

Data can still be recovered; proper destruction requires overwriting, cryptographic erasure, or physical destruction

Deleting files is faster and more secure than physical destruction

Reformatting permanently destroys all data beyond recovery

Data on hard drives automatically evaporates after 30 days

Which of the following is an example of a non-technical vulnerability?

An insider attack by a bank employee

A buffer overflow in application code

In a defense-in-depth architecture, what is the role of the edge router?

First line of defense using ACLs to filter traffic before it reaches internal systems

Encrypting all data stored on internal servers

Backing up critical data to offsite storage

Monitoring employee email for phishing attempts

What is the primary advantage of a firewall over a router ACL in defense-in-depth?

Firewalls perform stateful inspection and can distinguish established sessions from unsolicited traffic

Firewalls are always cheaper than routers

Firewalls do not need to be configured with any rules

Firewalls only block outbound traffic

What does the 'Security Artichoke' analogy represent in modern cybersecurity?

Borderless networks where attackers can access individual 'leaves' directly without peeling through all layers

A layered defense where each layer must be fully penetrated sequentially

A single perimeter firewall that protects everything inside

A network with no security controls at all

What does the 'Security Onion' analogy assume about network architecture?

There is a clearly defined perimeter with an inside and outside

The network has no perimeter and is completely borderless

Every device is directly connected to the internet

All data is stored in the cloud with no local servers

What is the purpose of Network Access Control (NAC) in a defense-in-depth strategy?

Verifies that devices meet security posture requirements before granting network access

Replaces the need for firewalls entirely

Encrypts all data transmitted between internal servers

Automatically deletes old log files to save storage space

Which of the following is a specialized security layer that inspects traffic in real time for attack signatures and can automatically block detected attack traffic?

IPS (Intrusion Prevention System)

125.1 Part 1 quiz | Quizalize

125.1 Part 2 quiz

IT ENGLISH: Lesson Notes - Part 1 (25 October 2022)

Ch 4 test review part 1-25

IT ENGLISH: Lesson Notes - Part 1 (25 August 2023)

SDC American History Review Part 1 (25 Questions)

IT ENGLISH: GFN - Lesson Notes - Part 1 (25 Nov. 2021)

IT ENGLISH: GFN Heilbronn 3 - Lesson Notes - Part #1 (25 Feb. 2021)

Related quizzes

Related quizzes