CSX Identify and Assess Cybersecurity Threats 5

Question 1

When assessing a threat's potential impact, which factor distinguishes a high-impact threat from a low-impact one?

Accepted Answer

The degree of harm to confidentiality, integrity, or availability of critical assets

Answer

Impact is measured by the extent to which a threat event would harm the organization's critical assets in terms of the CIA triad: confidentiality, integrity, and availability.

Question 2

An organization wants to understand which threat actors are most likely to target them specifically. Which activity best supports this goal?

Accepted Answer

Conducting threat actor profiling using OSINT and sector-specific intelligence

Answer

Threat actor profiling uses open-source intelligence and sector-specific threat feeds to identify which adversaries have the capability, intent, and history of targeting similar organizations.

Question 3

What distinguishes a worm from a traditional virus in terms of propagation?

Accepted Answer

Worms self-replicate across networks without user interaction; viruses require a host file

Answer

Unlike viruses that require a host file and user action to spread, worms independently replicate and propagate across networks by exploiting vulnerabilities.

Question 4

In a threat assessment, 'threat exposure' refers to:

Accepted Answer

The degree to which an organization's assets are accessible to identified threat actors

Answer

Threat exposure measures how accessible an organization's valuable assets are to potential threat actors, considering factors like attack surface and existing controls.

Question 5

Which of the following best describes a watering hole attack?

Accepted Answer

Compromising a website frequently visited by the intended targets to deliver malware

Answer

In a watering hole attack, adversaries compromise websites that targeted victims regularly visit, turning those trusted sites into malware delivery mechanisms.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Identify and Assess Cybersecurity Threats 5