CSX Cybersecurity Fundamentals Practice exam

These questions are part of the practice quiz. Start practicing

• What aspect does cybersecurity primarily focus on?
• Which type of documentation records details of information or events in an organized record-keeping system, usually sequenced in the order in which they occurred?
• Which of the following statements accurately describes APTs?
• The number and types of layers in a defense-in-depth strategy are influenced by what factors?
• Which of the following describes unauthorized modification of information?
• Which of the following can be categorized as a cybersecurity risk?
• In which phase of the system development lifecycle should security considerations first be introduced?
• According to the NIST framework, which function is NOT considered necessary for the protection of digital assets?
• What class of malware hides the existence of other malware?
• In risk management, which of the following is a proactive approach?
• What is the best definition for cybersecurity?
• Which stage of an incident response plan focuses on obtaining and preserving evidence?
• Which function involves preparing for a future incident in cybersecurity?
• Which of the following cryptology tools is used to prove message integrity?
• Under which principle should access controls be implemented?
• What role do patches play in software maintenance?
• What is the first step in vulnerability management?
• What term describes the documents that communicate required and prohibited activities and behaviors?
• What is one advantage of software firewalls compared to firewall appliances?
• System hardening should implement which key principle?
• What information does the chain of custody provide?
• What is a cybersecurity incident?
• What is a segmented network primarily composed of?
• Cybersecurity primarily involves the protection of which of the following?
• Which term describes the practice of verifying a user's identity through multiple factors?
• Which elements are essential for maintaining data integrity?
• According to NIST, how is a threat defined?
• Which cybersecurity role is primarily responsible for managing incidents and remediation?
• What is one of the main purposes of authentication in cybersecurity?
• Which protocol provides the strongest encryption for wireless network traffic?
• Smart devices and BYOD strategies are examples of what in cybersecurity?
• Which of the following methods can help protect data integrity?
• What does virtualization enable on a server?
• Which of the following is a method to control user traffic to the Internet?
• Which type of malware hides the existence of other malware by modifying the underlying operating system?
• Which of the following statements is considered false regarding cybersecurity?
• Which function is essential for aligning organizational objectives with desired outcomes?
• What does the transport layer of the OSI model ensure?
• What encompasses components such as directory services and user management capabilities?
• What is the primary goal of cybersecurity?
• What offers general guidance and recommendations on actions to take in specific situations?
• Which component of the NIST framework focuses on recovering from incidents?
• Which layer of the OSI model is responsible for ensuring reliable data transfer?
• Which layer of the OSI model is responsible for managing data links between devices?
• What is essential for a business continuity plan (BCP) to be considered complete?
• How does NIST define an incident?
• Which component of information security is subject to change over time and considers sensitivity and legal requirements?
• What three elements of the current threat landscape have increased opportunities for cybercrime?
• What role does recovery play in incident management?
• What type of firewall tracks open connection-oriented protocol sessions?
• How is encryption best described in the context of a cybersecurity program?
• What type of security policy typically defines user responsibilities regarding data protection?
• The core duty of cybersecurity is to identify, mitigate, and manage what?
• What do standards do in the context of cybersecurity?
• In the context of incident response, what does "mitigation" refer to?
• Which types of risk are typically associated with mobile devices?
• Advanced Persistent Threats (APTs) utilize which technique to remain undiscovered?
• What term is used for solutions to software programming and coding errors?
• What is an activity involved in the risk management process?
• What is one of the main challenges in securing SCADA systems?
• Which method is most effective in preventing phishing attacks?
• Which aspect is essential in the preparation phase of incident response?
• Failures in availability may disrupt which of the following?
• Which role is responsible for managing incidents and remediation within cybersecurity?
• What ensures a high degree of confidence regarding the integrity of evidence?
• Which element of an incident response plan is focused on obtaining and preserving evidence?
• What is the term for the concept that a message or piece of information is genuine?
• How is cybersecurity best defined?
• Which term best describes the idea of protecting information from unauthorized access?
• Which function is part of a robust risk management strategy?
• Integrity in information security is primarily concerned with what aspect?
• What is the purpose of an intrusion detection system (IDS)?
• Arrange the following steps of the incident response process in the correct order:
• Ensuring that resources are being used appropriately is a goal of what?
• Which of the following is NOT a common control used to protect the availability of information?
• Which of the following describes an asset?
• What is one benefit of a Bring Your Own Device (BYOD) policy?
• Which of the following is NOT a common control used to protect the availability of information?
• Which of the following is NOT a type of backup?
• Which statement describes cloud computing?
• What is one of the primary goals of governance in organizations?
• What does a business impact analysis (BIA) typically identify?
• What is the core duty of cybersecurity?
• In a typical information security organization, which role sets the strategic direction?
• What are used to interpret policies in specific situations?
• What is a significant factor in determining risk within an organization's digital assets?
• What does continuous monitoring in cybersecurity involve?
• What is a primary responsibility included in governance?
• What is the definition of cloud computing?
• What phase follows the investigation in the incident response process?
• Where should VPN tunnels typically terminate in an organization’s network?
• Which of the following statements about cybersecurity is true?
• Which methods are used to implement nonrepudiation?
• What is cybersecurity architecture designed around a perimeter called?
• Which of the following is NOT a potential consequence of lack of confidentiality?
• What control mechanism defines authentication and authorization protocols for users?
• What determines the procedures followed in working with evidence?
• Which of the following best describes the purpose of a BIA?
• What is the term for the path or route used to gain access to a target asset?
• Which of the following is primarily associated with identifying digital assets?
• What is an essential focus in asset management?
• What characteristic of cloud-computing environments allows for quick updates?
• What should the Internet perimeter do in response to threats?
• What aspect of penetration testing is emphasized in the reporting phase?
• What type of management focuses on maintaining the performance of a network?
• What is a primary function of the Internet perimeter in cybersecurity?
• What do guidelines provide to carry out procedures?
• Which statement regarding advanced persistent threats (APTs) is true?
• Which of the following is the correct order of the penetration testing phases?
• What principle should system hardening implement?
• What kind of software is categorized as malicious code?
• When does outsourcing present the most significant risk to an organization?
• Which term refers to detailed instructions on complying with policies and standards?
• Which of these refers to the software that protects the system from unauthorized access?
• What is the first step in vulnerability management?
• During which phase of the incident response model is the root cause determined?
• Which two factors are crucial in calculating the likelihood of an event?
• What action helps ensure that private network addresses remain hidden from the internet?
• A week of severe rainstorms has flooded your company's building, ruining all servers and resulting in three weeks of downtime. What is this an example of?
• What does a differential backup do?
• What is an attack vector?
• Which element is essential for determining risk exposure?
• An interoperability error is classified as which type of vulnerability?
• What is a vulnerability in the context of cybersecurity?
• Which factors are part of the threat landscape that influence cybercrime?
• Which of the following concepts focuses on ensuring that sensitive data is not accessed by unauthorized users?
• A potential consequence of lack of integrity includes which of the following?
• Which of the following best describes post-incident analysis?
• Which components are included in identity management?
• Which of the following best describes a distributed denial of service (DDoS) attack?
• The number and types of layers needed for defense in depth are dependent on what factors?
• What is the first step in the incident response process?
• How is encryption best described within an overall cybersecurity program?
• What is an essential aspect of network security management?
• What is the common name for software designed to disrupt computer operations?
• Which component of information security involves preventing unauthorized access to data?
• Which characteristic is common among advanced persistent threats (APTs)?
• What does virtualization involve?
• What is defined as anything capable of causing harm to an asset?
• What does a CAT-3 incident refer to under the US-CERT model for incident categorization?
• What is the purpose of the recovery process after a security incident?
• What term describes the degree to which a user or program can create, modify, read, or write to a file?
• In cybersecurity, what is the purpose of redundancy?
• What is one potential consequence of a lack of confidentiality?
• What is the term for the container that delivers an exploit to a target?
• What is considered software designed to gain access to systems, steal information, or disrupt operations?
• According to the NIST cybersecurity framework, which of the following is NOT a key function?
• How is authentication best described?
• What process ensures only authorized users can access certain information?
• What is the purpose of rootkits in malware?
• Business continuity plans (BCPs) should primarily be developed based on what?
• In practical applications, what is asymmetric key encryption primarily used for?
• Which process ensures the ongoing evaluation of cyber threats and security posture?
• What method is typically used to assess the strength of cybersecurity defenses?
• Which of the following backups includes only files that have changed since the last full backup?
• What is a vulnerability in cybersecurity?
• Who is typically responsible for managing technical controls in a security organization?
• A Business Impact Analysis (BIA) should identify which of the following?
• Which words best describe the nature of information security?
• In terms of cybersecurity, what does compliance often require?
• What do standards help interpret in specific situations?
• Which is NOT a function of policies within an organization?
• What does risk management not focus on?
• Digital signatures are used for which purpose in information security?
• What is one of the primary goals of governance in cybersecurity?
• What is the most crucial principle in tracing the source of malicious activity?
• What provides details on how to comply with established policies and standards?
• Why is it important to manage virtual systems using a dedicated VLAN?
• What is a threat in terms of cybersecurity?
• What term is used for the process of verifying a user's identity before granting access to resources?
• What is one of the key benefits of using a DMZ system?
• What is the primary purpose of identity management?
• What are patches intended to resolve?
• Which term refers to the prevention of data leaks and unauthorized information exposure?
• What is a major concern during the mitigation and recovery phase of an incident response?
• What is the process of converting plaintext messages to ciphertext messages called?
• Which term refers to something of value worth protecting?
• To which layer of the OSI model does Ethernet correspond?
• What does the session layer of the OSI model manage?
• Which of the following is necessary to verify that organizational resources are used appropriately?
• Which principle restricts access to sensitive data only to individuals who need it?
• Authentication is best defined as?
• What does the chain of custody provide information about regarding evidence?
• What condition can result from interruptions in availability?
• What do policies communicate regarding activities and behaviors?
• Which types of risk are included in the scope of risk management?
• What responsibilities fall under Governance, Risk Management and Compliance (GRC)?
• What does the term 'social engineering' refer to in cybersecurity?
• What areas are considered functional in ISO-defined network management?
• Which type of data protection guarantees that a statement cannot be denied?
• Which component is essential for detecting rogue activities on a network?
• A passive network hub operates at which layer of the OSI model?
• Which of the following best illustrates the aim of information security?
• Which elements of the current threat landscape are associated with increased access for cybercrime?
• Which of the following is NOT a component of governance?
• What is a critical element of effective cybersecurity governance?
• How often should risk assessments be performed?
• What term is commonly used to describe the attack mechanism directed against a system?
• Which of the following is NOT a functional area of network management as defined by ISO?
• What do we call the container that delivers the exploit to the target in an attack?
• Which of the following are potential consequences of a lack of availability?
• When two or more controls work in parallel to protect an asset, what is this called?
• What is cloud computing defined as?