CSX Identify and Assess Cybersecurity Threats 2

Question 1

An organization notices that an attacker has been slowly exfiltrating small amounts of data over several months to avoid detection. Which threat category best describes this behavior?

Accepted Answer

Advanced Persistent Threat (APT)

Answer

APTs are characterized by prolonged, stealthy intrusions where attackers maintain access over extended periods to quietly steal data.

Question 2

Which NIST framework function is most directly associated with identifying cybersecurity threats before they cause harm?

Accepted Answer

Identify

Answer

The NIST 'Identify' function focuses on developing organizational understanding to manage cybersecurity risk, including asset management and risk assessment.

Question 3

A threat intelligence feed reports that a new malware strain uses fileless techniques. What does 'fileless' mean in this context?

Accepted Answer

The malware operates entirely in memory without writing to disk

Answer

Fileless malware executes in RAM using legitimate system tools like PowerShell, leaving no traditional file artifacts on disk.

Question 4

When assessing threat likelihood, which factor most directly influences the probability that a specific threat actor will successfully exploit a vulnerability?

Accepted Answer

The threat actor's capability and motivation relative to existing controls

Answer

Likelihood is determined by evaluating whether a threat source has the capability and intent to exploit a vulnerability given the current controls in place.

Question 5

Which of the following is an example of a supply chain threat?

Accepted Answer

Malicious code inserted into a software vendor's update package

Answer

Supply chain threats occur when attackers compromise a trusted third-party vendor or software to gain access to downstream targets, as seen in the SolarWinds attack.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Identify and Assess Cybersecurity Threats 2