Cyber Security Jobs Organizational Cyber Security 2

Question 1

An organization wants a single document that defines acceptable use, access rules, and consequences for employees. Which artifact is this?

Accepted Answer

Security policy

Answer

Network diagram

Answer

Penetration test report

Answer

Incident log

Question 2

Which framework is most commonly used in the US to organize cybersecurity risk management across functions like Identify, Protect, Detect, Respond, and Recover?

Accepted Answer

NIST Cybersecurity Framework

Answer

GDPR

Answer

PCI forensic standard

Answer

ITIL

Question 3

Separation of duties is primarily intended to reduce which risk?

Accepted Answer

Fraud or error by a single individual

Answer

Slow internet speeds

Answer

Hardware failure

Answer

Software licensing costs

Question 4

What is the main goal of a security awareness training program?

Accepted Answer

Reduce human-error-based incidents like phishing

Answer

Replace antivirus software

Answer

Eliminate the need for firewalls

Answer

Increase server uptime

Question 5

A company classifies data as Public, Internal, Confidential, and Restricted. This practice is called:

Accepted Answer

Data classification

Answer

Data deduplication

Answer

Data masking

Answer

Data sharding

Question 6

Which role is typically accountable for the overall information security strategy in a large organization?

Accepted Answer

Chief Information Security Officer (CISO)

Answer

Help desk technician

Answer

Marketing director

Answer

Database administrator

Question 7

What does the principle of least privilege require?

Accepted Answer

Granting users only the access needed for their job

Answer

Giving all users admin rights

Answer

Disabling all user accounts

Answer

Sharing one account among staff