Cybersecurity & Risk Management Flashcards
7 cards from real TOC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Cybersecurity & Risk Management flashcards as text
An HR manager receives an urgent email appearing to be from the CEO requesting an immediate wire transfer of employee payroll data. This is an example of which attack type?
Answer: Business email compromise (BEC)
Business email compromise (BEC) involves attackers impersonating executives to manipulate employees into fraudulent actions.
Under CCPA, which category of employee data requires the highest level of protection?
Answer: Social Security numbers and financial account information
Social Security numbers and financial account information are classified as sensitive personal information under CCPA, requiring heightened protection.
A talent optimization consultant is assessing risk from a recently terminated employee who had admin access to the HRIS. What is the FIRST action that should have occurred?
Answer: Revoke all system access immediately upon termination
Immediate access revocation upon termination is the critical first step to prevent insider threats from former employees.
Which framework is most commonly used by organizations to structure their cybersecurity risk management programs?
Answer: NIST Cybersecurity Framework
The NIST Cybersecurity Framework provides a structured approach to identifying, protecting, detecting, responding to, and recovering from cyber threats.
An organization discovers that an employee has been sharing confidential compensation data via personal email. This is best classified as which type of risk?
Answer: Negligent insider threat
A negligent insider threat involves an employee who inadvertently or carelessly exposes sensitive data without malicious intent.
Which data classification level typically applies to aggregated employee performance review data stored in an HRIS?
Answer: Confidential
Employee performance data is confidential because its disclosure could harm individuals or the organization but is not at the highest classification tier.
A company wants to reduce the risk of credential stuffing attacks against its talent management platform. Which control is MOST effective?
Answer: Implementing multi-factor authentication (MFA)
MFA prevents credential stuffing attacks by requiring a second verification factor even when passwords are compromised.