TOC Cybersecurity & Risk Management 2

Question 1

An HR manager receives an urgent email appearing to be from the CEO requesting an immediate wire transfer of employee payroll data. This is an example of which attack type?

Accepted Answer

Business email compromise (BEC)

Answer

Business email compromise (BEC) involves attackers impersonating executives to manipulate employees into fraudulent actions.

Question 2

Under CCPA, which category of employee data requires the highest level of protection?

Accepted Answer

Social Security numbers and financial account information

Answer

Social Security numbers and financial account information are classified as sensitive personal information under CCPA, requiring heightened protection.

Question 3

A talent optimization consultant is assessing risk from a recently terminated employee who had admin access to the HRIS. What is the FIRST action that should have occurred?

Accepted Answer

Revoke all system access immediately upon termination

Answer

Immediate access revocation upon termination is the critical first step to prevent insider threats from former employees.

Question 4

Which framework is most commonly used by organizations to structure their cybersecurity risk management programs?

Accepted Answer

NIST Cybersecurity Framework

Answer

The NIST Cybersecurity Framework provides a structured approach to identifying, protecting, detecting, responding to, and recovering from cyber threats.

Question 5

An organization discovers that an employee has been sharing confidential compensation data via personal email. This is best classified as which type of risk?

Accepted Answer

Negligent insider threat

Answer

A negligent insider threat involves an employee who inadvertently or carelessly exposes sensitive data without malicious intent.

(TOC) Talent Optimization Consultant Practice Test

(TOC) Talent Optimization Consultant Practice Test

TOC Cybersecurity & Risk Management 2