Identify the Increasing Data Security Threats to IT Systems and Data. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is evaluating its data security strategy. They have a limited budget and must choose between investing in a Data Loss Prevention (DLP) solution or a Security Information and Event Management (SIEM) solution. The company's primary concern is detecting and responding to insider threats. Which investment is more directly aligned with this concern?

   • AThe DLP solution, because it can monitor and block the unauthorized transfer of sensitive data, which is a key indicator of insider threat activity
   • BBoth are equally effective, so the choice should be based on cost
   • CNeither is effective against insider threats, so the budget should be spent on background checks
   • DThe SIEM solution, because it can correlate logs from multiple sources to detect anomalous user behavior
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A software development company stores its source code in a private Git repository. A developer's laptop is compromised with a credential-stealing trojan. What is the most immediate and critical data security threat to the company's source code in this scenario?

   • AUnauthorized access and exfiltration of the source code using the stolen Git credentials
   • BA phishing attack targeting other developers to gain access to the repository
   • CA denial-of-service attack against the Git repository server
   • DRansomware encrypting the source code on the developer's local machine
   Reveal Solution Discussion Select an answer first
4. 3application · easy

   A company's CFO receives an email that appears to be from the CEO, urgently requesting a wire transfer to a new vendor. The email address is slightly different from the CEO's real one. This is an example of which type of data security threat?

   • ARansomware
   • BA distributed denial-of-service (DDoS) attack
   • CBusiness Email Compromise (BEC) / spear phishing
   • DAn insider threat
   Reveal Solution Discussion Select an answer first
5. 4application · easy

   A security analyst notices a large amount of data being transferred from a database server to an external IP address during non-business hours. The database contains customer PII. This is most likely an indicator of which type of threat?

   • AA distributed denial-of-service (DDoS) attack
   • BA ransomware attack in progress
   • CData exfiltration by an external attacker or malicious insider
   • DA normal backup process
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A healthcare organization is required to protect patient data. They are considering moving to a public cloud provider. Which of the following is a primary data security threat that the organization must address in this migration?

   • AThe inability to meet data residency requirements in the cloud
   • BMisconfiguration of cloud storage buckets leading to public exposure of patient data
   • CA lack of encryption for data in transit
   • DThe cloud provider's physical security of their data centers
   Reveal Solution Discussion Select an answer first