Explain Cybersecurity DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 5)

Questions 21–24

1. 21application · medium

   A legal firm stores client case files in a backup system. The firm's compliance officer requires that only authorized attorneys can read the files, that the files cannot be altered without detection, and that the files are available for e-discovery within 24 hours of a request. Which combination of cybersecurity goals does this requirement map to?

   • AConfidentiality and availability only
   • BConfidentiality, integrity, and availability
   • CConfidentiality and integrity only
   • DIntegrity and availability only
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A financial firm's backup administrator receives an email from the IT director asking all staff to urgently change their backup console passwords by clicking a link in the email. The email address looks similar to the director's but has one extra character. Several employees have already clicked the link and entered their credentials. Which type of threat is this, and what is the most immediate security control to mitigate the damage?

   • APhishing; immediately reset all affected users' passwords and revoke active sessions
   • BInsider threat; disable the IT director's account permanently
   • CRansomware; disconnect all backup systems from the network
   • DMalware; run a full antivirus scan on the backup server
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   An organization deploys a security information and event management (SIEM) system to monitor network traffic and generate alerts for suspicious activity. Which type of security control does this represent?

   • APreventive control
   • BDetective control
   • CDeterrent control
   • DCorrective control
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A university's backup administrator discovers that a backup job failed because the storage system was full. The administrator deletes old, expired backups to free space and reruns the job successfully. Which type of control did the administrator apply?

   • ADeterrent — the administrator discouraged future failures
   • BCorrective — the administrator fixed the problem after it occurred
   • CPreventive — the administrator stopped the failure from happening again
   • DDetective — the administrator identified the cause of the failure
   Reveal Solution Discussion Select an answer first