CSC Threat Assessment & Risk Analysis 3

Question 1

When applying the NIST Risk Management Framework (RMF), at which step are security controls selected based on system categorization?

Accepted Answer

Select

Answer

The Select step in NIST RMF involves choosing security controls from NIST SP 800-53 appropriate to the system's categorization level.

Question 2

A CSC is assessing insider threat risk. Which behavioral indicator is most strongly associated with data exfiltration intent?

Accepted Answer

Large-volume downloads shortly after submitting a resignation notice

Answer

Mass data downloads by an employee who has resigned is a classic precursor indicator of intellectual property theft.

Question 3

Which formula correctly represents the fundamental risk calculation used in most qualitative frameworks?

Accepted Answer

Risk = Likelihood × Impact

Answer

Most qualitative risk frameworks calculate risk as the product of Likelihood (probability of occurrence) and Impact (severity of consequences).

Question 4

A security consultant discovers that a critical industrial control system (ICS) has never been patched due to vendor restrictions. Which risk treatment is most appropriate?

Accepted Answer

Implement compensating controls such as network segmentation and enhanced monitoring

Answer

When patching is prohibited, compensating controls like network isolation and anomaly monitoring reduce risk without violating vendor restrictions.

Question 5

Which kill chain phase does lateral movement most directly correspond to in the Lockheed Martin Cyber Kill Chain?

Accepted Answer

Actions on Objectives

Answer

Lateral movement occurs as adversaries expand access toward their target, which corresponds to the Actions on Objectives phase where they pursue their mission.

(CSC) Certified Security Consultant Practice Test

(CSC) Certified Security Consultant Practice Test

CSC Threat Assessment & Risk Analysis 3