Security Frameworks and CIS Controls GSEC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following best describes the primary purpose of a security framework in an organization?

   • ATo replace the need for security policies and procedures within an organization.
   • BTo guarantee that an organization will never experience a security breach.
   • CTo provide a structured set of guidelines that help an organization plan, implement, and assess its security program.
   • DTo serve as a legal requirement that all organizations must adopt to operate.
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A mid-sized company with a small security team is implementing the CIS Controls. They have completed IG1 and are now considering IG2. The company handles sensitive customer data and has a moderate risk profile. Which additional capability is most characteristic of IG2 compared to IG1?

   • AImplementing centralized logging and monitoring across the organization.
   • BConducting regular penetration tests and red team exercises.
   • CImplementing a firewall and antivirus on all endpoints.
   • DEstablishing a basic asset inventory of hardware and software.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A manufacturing company wants to improve its security posture but has limited IT staff. They have already implemented basic inventory and patch management. Which CIS Control should they prioritize next to reduce the risk of common email-based attacks?

   • AImplement data recovery procedures.
   • BImplement email and web browser protections.
   • CConduct penetration testing.
   • DDevelop an incident response plan.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How are the 18 CIS Controls categorized?

   • ATechnical, Administrative, and Physical
   • BPreventive, Detective, and Corrective
   • CBasic, Foundational, and Organizational
   • DLow, Medium, and High
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary characteristic of the CIS Controls?

   • AThey are a prioritized set of actions designed to mitigate the most common cyber attacks.
   • BThey are a certification standard that organizations must pass to be compliant.
   • CThey are a framework focused solely on cloud security.
   • DThey are a set of legal requirements that all organizations must follow.
   Reveal Solution Discussion Select an answer first