Cyber Security Jobs Organizational Cyber Security 2

Question 1

An organization wants a single document that defines acceptable use, access rules, and consequences for employees. Which artifact is this?

Accepted Answer

Security policy

Answer

A security policy formally defines acceptable use, access rules, and enforcement consequences.

Question 2

Which framework is most commonly used in the US to organize cybersecurity risk management across functions like Identify, Protect, Detect, Respond, and Recover?

Accepted Answer

NIST Cybersecurity Framework

Answer

The NIST CSF organizes risk management into Identify, Protect, Detect, Respond, and Recover.

Question 3

Separation of duties is primarily intended to reduce which risk?

Accepted Answer

Fraud or error by a single individual

Answer

Splitting critical tasks among people prevents any one person from committing or hiding fraud.

Question 4

What is the main goal of a security awareness training program?

Accepted Answer

Reduce human-error-based incidents like phishing

Answer

Awareness training targets human behavior, the cause of most phishing and social-engineering incidents.

Question 5

A company classifies data as Public, Internal, Confidential, and Restricted. This practice is called:

Accepted Answer

Data classification

Answer

Data classification labels information by sensitivity to apply appropriate controls.

Cyber Security Jobs Practice Test

Cyber Security Jobs Practice Test

Cyber Security Jobs Organizational Cyber Security 2