Overview of Information Security and Defense Strategies EHE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company's employee laptop is infected with malware after the employee clicked a link in a phishing email. Which of the following is the threat in this scenario?

   • AThe employee's lack of security awareness
   • BThe company's data stored on the laptop
   • CThe laptop's operating system
   • DThe phishing email and the malware it delivered
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A manufacturing company has a legacy control system that cannot be patched. The system is critical to production, and a vulnerability could allow an attacker to shut down the plant. What is the most appropriate risk treatment?

   • AAccept the risk because the system is critical and cannot be changed.
   • BAvoid the risk by shutting down the control system entirely.
   • CMitigate the risk by isolating the control system from the corporate network and implementing strict access controls.
   • DTransfer the risk by purchasing a cyber insurance policy.
   Reveal Solution Discussion Select an answer first
4. 23expert · medium

   A multinational company must comply with data protection regulations in multiple countries. The security team is developing a new data classification policy. They need to balance the need for data sharing across teams with the requirement to protect sensitive data. Which approach best balances these needs?

   • AUse a single classification label for all data to simplify compliance, but apply the highest level of control.
   • BClassify all data as 'confidential' and require encryption and access controls for everything.
   • CClassify data into tiers (e.g., public, internal, confidential, restricted) and apply controls based on the classification.
   • DLet each employee decide the classification of data they create, with no central oversight.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An organization wants to ensure that all security incidents are reported and handled consistently. Which document should define the steps to follow when an incident occurs?

   • ASecurity standard
   • BSecurity policy
   • CIncident response procedure
   • DSecurity guideline
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has implemented a firewall, antivirus software, and user training. Which defense-in-depth principle does this illustrate?

   • AEliminating all vulnerabilities in the system.
   • BLayering multiple controls so that if one fails, others still provide protection.
   • CUsing only technical controls to secure the environment.
   • DPlacing all controls at the network perimeter.
   Reveal Solution Discussion Select an answer first