Managing and Mitigating Cyber Risk GISF Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   An organization deploys an intrusion detection system (IDS) to monitor network traffic and alert security staff when suspicious activity is detected. Which category of security control does this represent?

   • ADetective control
   • BCorrective control
   • CPreventive control
   • DDeterrent control
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company has implemented a comprehensive security program with preventive, detective, and corrective controls. During a routine review, the security team discovers that the detective controls are generating a high number of false positives, causing alert fatigue among analysts. As a result, some real alerts are being missed. The team must decide how to adjust the controls. Which approach best addresses the issue while maintaining effective detection?

   • ATune the detective controls to reduce false positives while maintaining coverage of critical events.
   • BDisable the detective controls to eliminate false positives.
   • CIgnore the false positives and focus on the alerts that seem most critical.
   • DIncrease the number of analysts to handle the alert volume.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Why is continuous monitoring of security controls important in a cyber risk management program?

   • AIt is required only for organizations that have experienced a breach
   • BIt guarantees that no security incidents will occur
   • CIt eliminates the need for periodic risk assessments
   • DIt ensures that controls remain effective as threats, systems, and business environments change over time
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An e-commerce company wants to ensure that a security breach is detected quickly and that the business can recover with minimal data loss. Which combination of controls should they prioritize?

   • AIntrusion detection system (IDS) and regular automated backups
   • BLoad balancer and redundant power supplies
   • CEncryption and data loss prevention (DLP)
   • DFirewall and antivirus software
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A financial institution is required by its regulator to perform a risk assessment that includes both quantitative and qualitative elements. The institution has a large portfolio of assets, including a core banking system, a customer portal, and internal workstations. The security team has limited time and budget. They must decide how to allocate effort. The core banking system has a high likelihood of a targeted attack and a high impact if compromised. The customer portal has a medium likelihood and medium impact. The workstations have a low likelihood but a high impact due to the sensitive data they access. Which approach best meets the regulatory requirement while managing limited resources?

   • APerform a full quantitative analysis on all assets to ensure accuracy.
   • BFocus only on the core banking system and ignore the other assets.
   • CPerform a detailed quantitative analysis on the core banking system and use qualitative analysis for the other assets.
   • DUse only qualitative analysis for all assets because it is faster.
   Reveal Solution Discussion Select an answer first