Which of the following describes 'Remediation' in the context of a vulnerability management plan?

The act of fixing or 'patching' a vulnerability to prevent it from being exploited.

The act of deleting all user data to ensure that hackers cannot steal it.

The process of discovering new software to purchase for the company.

The legal process of suing a hacker after a data breach has occurred.

Which of the following describes 'Risk Transference' in a vulnerability management strategy?

Shifting the financial or operational impact of a potential vulnerability to a third party, such as an insurance company.

Replacing all company computers with newer models every six months to avoid hardware failure.

Training all employees to identify phishing emails so they do not click on malicious links.

Encrypting all files so that they are unreadable even if a hacker manages to steal them.

In the context of vulnerability management, what is a 'Vulnerability Scanner' primarily used for?

An automated tool that probes systems and networks to find known security weaknesses.

A firewall setting that blocks all incoming traffic from social media websites.

A program that speeds up internet connection by removing unnecessary data packets.

A hardware device used to digitize physical paper documents for secure storage.

Which of the following is an example of a 'Zero-Day' vulnerability?

A security flaw that is known to hackers but has no existing fix or patch from the software creator.

A vulnerability that only affects computers that have been turned on for zero hours.

A software bug that takes exactly zero days to fix after it is discovered.

A type of virus that automatically deletes itself at midnight.

Which of the following metrics is most commonly used by security professionals to rate the severity of a vulnerability on a scale from 0 to 10 ?

CVSS (Common Vulnerability Scoring System)

HTTP (Hypertext Transfer Protocol)

Which of the following is considered 'Risk Mitigation' in vulnerability management when a security patch is not yet available for a software flaw?

Implementing a temporary firewall rule to block traffic to the vulnerable service.

Increasing the internet speed of the server to handle the incoming attacks.

Ignoring the vulnerability until the software vendor releases an official update.

Rewriting the entire operating system from scratch to avoid the bug.

Which of the following is a common risk associated with performing an aggressive vulnerability scan on a fragile or legacy network system?

The scan may overwhelm the system, causing it to crash or become unresponsive

The scan will automatically permanently delete all files on the network

The scan will change the network's internet service provider

The scan will install a new physical firewall on the server rack

Which of the following are key areas of focus for a non-credentialed scan in a vulnerability assessment?

Compromised User Account Passwords

Which of the following are key purposes of running a credentialed scan in a vulnerability assessment?

Third-Party Public Network Access

In a security operations center, what is the primary difference between a SIEM and a SOAR tool?

SIEM focuses on collecting and analyzing log data, while SOAR focuses on automating response actions.

SOAR collects data from social media, while SIEM only looks at internal emails.

SIEM is used only for hardware repairs, while SOAR is used only for software updates.

SIEM is a physical firewall device, while SOAR is a type of antivirus software.

Which of the following best describes the 'Orchestration' component of a SOAR platform?

Connecting different security tools and technologies to work together in a coordinated way.

Writing a musical score to play when a security breach is detected.

A method for physically organizing the servers in a data center.

The process of manually deleting every infected file on a computer.

Which of the following describes the process of 'Auditing' in a cybersecurity context?

Recording specific user actions and system events to a log file for later review

Encrypting all data stored on a hard drive

Automatically deleting suspicious files before they are opened

Increasing the speed of the processor during a cyber attack

Which of the following describes the difference between a 'Success Audit' and a 'Failure Audit' in a security log?

Success Audit logs when a task like a login is completed correctly, while Failure Audit logs when the task fails, such as entering a wrong password.

Success Audit means the system was patched, while Failure Audit means a virus was detected.

Success Audit is and only used for administrators, while Failure Audit is only used for guest users.

Success Audit deletes the log after reading, while Failure Audit saves the log to an external cloud drive.

In cybersecurity, what is the primary difference between a 'White Box' and a 'Black Box' penetration test?

The amount of prior knowledge the tester has about the target system

The physical location where the testing takes place

The color of the computer hardware being tested

Whether the penetration tester is a legal employee or a criminal

Cybersecurity 1 - Unit 7/12

Cybersecurity - Unit 1 and 2 Review

CodeHS Unit 8 Cybersecurity - 1st period

Learning Unit 5 Cybersecurity, Risk Management and Financial Crime - ITMA6212

ChatGPT Quiz: Basics of Cybersecurity #1

Cybersecurity Solutions Part 1

Advanced Cybersecurity - Security + Domain 1 Lesson 8 - Wireless and Layer 2 Attacks

CHP 1 - Intro to Cybersecurity

Related quizzes

Related quizzes