Cybersecurity Management
Mock Exam
Course Introduction
Cybersecurity Management focuses on the strategies, policies, and best practices essential to protecting an organization's information assets and technological infrastructure. The course examines risk assessment methodologies, cybersecurity governance frameworks, incident response planning, and regulatory compliance, providing students with the tools to identify vulnerabilities and manage cyber threats effectively. Students will explore the roles and responsibilities of cybersecurity professionals, learn how to implement security controls, and develop plans to ensure business continuity in the face of evolving cyber risks. Through case studies and real-world scenarios, the course prepares future managers to make informed decisions and foster a security-conscious organizational culture.
Recommended Textbook
Principles of Incident Response and Disaster Recovery 1st Edition by Michael
Available Study Resources on Quizplus 11 Chapters
549 Verified Questions
549 Flashcards
Source URL: https://quizplus.com/study-set/2243
Page 2
E. Whitman
Chapter 1: Contingency Planning Within Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44623
Sample Questions
Q1) ____ is the control approach that attempts to shift the risk to other assets,other processes,or other organizations.
A)Transference
B)Mitigation
C)Acceptance
D)Avoidance
Answer: A
Q2) ____ is the process of examining and documenting the security posture of an organization's information technology and the risks it faces.
A)Risk identification
B)Data classification
C)Security clearance
D)DR
Answer: A
Q3) An information security policy provides rules for the protection of the information assets of the organization.
A)True
B)False
Answer: True
Page 3
To view all questions and flashcards with answers, click on the resource link above.
Chapter 2: Planning for Organizational Readiness
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44624
Sample Questions
Q1) List five elements that contribute to a successful business impact analysis. Answer: 1."Scope the BIA appropriately,and take into account all categories of risk to the organization,as well as all categories of impact.
2.Develop a data-gathering plan that addresses the analytic needs of executive management.Collecting the right information is critical.
3.Use objective data to draw conclusions whenever possible,but recognize that subjective data from knowledgeable and experienced personnel can be equally important.
4.Seek executive management's requirements in advance of the study,and deliver the risk assessment and BIA results in a manner that meets those requirements.
5.Obtain validation from business process owners and executives to ensure commitment."
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Incidence Response: Preparation, Organization, and Prevention
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44625
Sample Questions
Q1) Organizing the incident response planning process begins with staffing the disaster recovery committee.
A)True
B)False
Answer: False
Q2) Offers network-based challenges,builds skills used in creating server/client applications,and challenges the user to figure out problems with various network protocols.
A)Distributed incident response teams
B)Teamwork skills
C)Education and awareness
D)IR plan
E)After-action review
F)Full-interruption testing
G)Catalyst
H)Blackhole
I)Semtex
Answer: I
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Incident Response: Detection and Decision Making
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/44626
Sample Questions
Q1) Using a process known as ____,Network IDSs must look for attack patterns by comparing measured activity to known signatures in their knowledge base to determine whether or not an attack has occurred or may be underway.
A)clipping
B)cache poisoning
C)scanning
D)signature matching
Q2) The task of monitoring file systems for unauthorized change is best performed by using a(n)____.
A)cache
B)honeypot
C)SPAN
D)HIDS
Q3) The smart systems administrator backs up system logs but not system data.
A)True
B)False
Q4) The term ____________________ refers to a consolidation of almost identical alarms into a single higher-level alarm.
Page 6
Q5) Briefly describe the tasks involved in managing logs.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Incidence Response: Reaction, Recovery, and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44627
Sample Questions
Q1) What is the three-step methodology followed by computer forensics?
Q2) What are the key steps in the Protect and Forget reaction strategy?
Q3) ____ is the coherent application of methodical investigatory techniques to solve crime cases.
A)Forensics
B)Alarm Compaction
C)Signature matching
D)Scanning
Q4) The ____ handles computer crimes that are categorized as felonies.
A)FBI
B)U.S.Secret Service
C)U.S.Treasury Department
D)CIA
Q5) The ____ is a scripted description of the incident and consists of just enough information so that each responder knows what portion of the IR plan to implement without impeding the notification process.
A)sequential roster
B)hierarchical roster
C)alert roster
D)alert message
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Contingency Strategies for Business
Resumption Planning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44628
Sample Questions
Q1) ____ performs two different parity computations or the same computation on overlapping subsets of the data.
A)RAID level 4
B)RAID level 5
C)RAID level 6
D)RAID level 7
Q2) What are the advantages and disadvantages of the Towers of Hanoi rotation method?
Q3) What is the difference between a service bureau and a mutual agreement?
Q4) How does remote journaling differ from electronic vaulting?
Q5) ____ creates one larger logical volume across several available hard disk drives and stores the data in segments,called stripes,across all the disk drives in the array.
A)RAID 0
B)RAID level 1
C)RAID level 2
D)RAID levels 3 and 4
Q6) ____________________ technology is designed to replace operating systems and services when they fail.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Q7) Discuss the sixteen step process of the Grandfather-Father-Son backup method.
Chapter 7: Disaster Recovery: Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44629
Sample Questions
Q1) When selecting an off-site storage location for data backups or stored equipment,extra care should be taken to increase the risk at that storage location.
A)True
B)False
Q2) Works to reestablish functions by repairing or replacing damaged or destroyed components.
A)Disaster management team
B)Business interface team
C)Actions after
D)Network recovery team
E)Storage recovery team
F)Data management team
G)Vendor contact team.
H)Logistics team.
I)Business interface team.
Q3) List five contingency strategies to be considered for Web sites.
Q4) The disaster response,like incident response,usually begins with a(n)____________________.
Page 9
Q5) List five strategies that should be considered for distributed systems.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Disaster Recovery: Operation and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44630
Sample Questions
Q1) Briefly discuss the five phases of the DR recovery plan.
Q2) The ____ must have a mechanism to contact everyone in the organization,especially if part of the message is "don't report to work today,but call this number for more information."
A)business interface
B)staff roster
C)forensic roster
D)DR plan roster
Q3) ____________________ testing can include employees conducting self-assessments after an exercise by completing feedback surveys indicating what they thought worked well and what did not.
Q4) What are the primary goals associated with the restoration phase?
Q5) The ____________________ phase involves activating the disaster recovery plan and following the steps outlined therein.
Q6) Discuss the three primary goals of the disaster recovery plan.
Q7) The alert roster must be tested more frequently than other components of the plans because it is the area subject to change due to employee turnover.
A)True
B)False
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Business Continuity Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44631
Sample Questions
Q1) A(n)____________________ site is an empty room with standard heating,air conditioning,and electrical service.
Q2) Involves online activities on a systems level.
A)Disaster recovery
B)Business continuity
C)Hot site
D)Cold site
E)Service contracts
F)Remote journaling
G)System recovery team
H)Network team
I)Logistics team
Q3) Discuss five tips for effective BC planning.
Q4) The primary disadvantage of a cold site is cost.
A)True
B)False
Q5) A(n)____________________ stipulates that each organization is obligated to provide the necessary facilities,resources,and services until the receiving organization is able to recover from the disaster.
Q6) What is the purpose of the business continuity program at the organization? Page 11
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 10: Business Continuity Operations and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44632
Sample Questions
Q1) Inevitably pays off in efficiency of the operation once the business continuity plan is implemented.
A)Trigger point
B)Preparation undertaken by an organization
C)Network recovery team
D)Security
E)Insurance
F)BC plan
G)BC review
H)Information systems security control
I)Plan
Q2) The ____ team works with the hardware and OS teams to get internal and external services up and running to begin supporting business functions.
A)applications recovery
B)OS
C)computer setup team
D)network recovery team
Q3) What is the difference between the business continuity team and the operations team?
Page 13
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Crisis Management and Human Factors
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44633
Sample Questions
Q1) Those few things that must go well to ensure success for a manager or an organization,and,therefore,they represent those managerial or enterprise areas,that must be given special and continual attention to bring about high performance.
A)Crisis management team
B)Head-counts
C)Critical success factors
D)The plan
E)First-level priority objectives
F)Alert roster tests
G)Tabletop exercise
H)PTSD
I)EAPs
Q2) A(n)____ is the physical accountability of all personnel and is essential in determining an individual's whereabouts during an emergency (whether they are still inside a building or not).
A)personnel count
B)employee count
C)head count
D)team leader count
To view all questions and flashcards with answers, click on the resource link above. Page 14