Quiz
CYBER Quiz
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (76)
1What regulations will DoD follow for cybersecurity policy? Select the best answer.
- ADIACAP
- BDoD 8500 Series
- CDCID 6/3
- DDoD 6500 Series
2What policy partnerships has DoD developed to standardize cybersecurity and protect the unique
requirements of DoD missions and warfighters? Select the best answer.- ACNSS and NIST
- BTier 1, Tier 2, and Tier 3
- CDIACAP and RMF
- DPlatform, Process, and Organization
3What factors do organizations need to take into account when implementing a holistic approach
to organizational risk management? Select all that apply.- AStrategic Goals and Objectives
- BRelationships between mission/business process
- CSupporting Information Systems
- DOrganizational culture and infrastructure
4PIT systems refer to: Select the best answer.
- APriority Information Technology
- BProprietary Information Technology
- CPlatform Information Technology
- DProcess Information Technology
5What broad groups does DoD use to categorize information technology? Choose the best answer.
- AInformation Systems and PIT
- BInformation Systems and Products
- CPIT and Services
- D(a) and (b )
- E(b) and (c )
6In what Step of the Risk Management Framework is continuous monitoring employed? Select the
best answer.- AStep 1
- BStep 4
- CStep 5
- DStep 6
7Match the following Steps of the Risk Management Framework to "Step 1 Categorize System"
- ARegister System with DoD
- BCommon Control Identification
- CImplement Control Solutions
- DDevelop & Approve Security Assessment
Plan - EAO Conducts Final Risk Determination
- FDetermine Impact of changes to the system
& environment
8Match the following Steps of the Risk Management Framework to "Step 2 Select Security Controls"
- ARegister System with DoD
- BCommon Control Identification
- CImplement Control Solutions
- DDevelop & Approve Security Assessment
Plan - EAO Conducts Final Risk Determination
- FDetermine Impact of changes to the system
& environment
9Match the following Steps of the Risk Management Framework to "Step 3 Implement Security Controls"
- ARegister System with DoD
- BCommon Control Identification
- CImplement Control Solutions
- DDevelop & Approve Security Assessment
Plan - EAO Conducts Final Risk Determination
- FDetermine Impact of changes to the system
& environment
10Match the following Steps of the Risk Management Framework to "Step 4 Assess Security Controls"
- ARegister System with DoD
- BCommon Control Identification
- CImplement Control Solutions
- DDevelop & Approve Security Assessment
Plan - EAO Conducts Final Risk Determination
- FDetermine Impact of changes to the system
& environment
11Match the following Steps of the Risk Management Framework to "Step 5 Authorize System"
- ARegister System with DoD
- BCommon Control Identification
- CImplement Control Solutions
- DDevelop & Approve Security Assessment
Plan - EAO Conducts Final Risk Determination
- FDetermine Impact of changes to the system
& environment
12Match the following Steps of the Risk Management Framework to "Step 6 Monitor Security Controls Activities"
- ARegister System with DoD
- BCommon Control Identification
- CImplement Control Solutions
- DDevelop & Approve Security Assessment
Plan - EAO Conducts Final Risk Determination
- FDetermine Impact of changes to the system
& environment
13What activities occur in Step 4 of the Risk Management Framework (RMF), Assess Security Controls?
- AConduct final risk determination
- BPrepare the Plan of Action and Milestones (POA&M)
- CPrepare Security Assessment Report (SAR)
- DAll of the above
14Select ALL of the correct responses. What is included in the security authorization package?
- APlan of Action and Milestones (POA&M)
- BSecurity Assessment Report (SAR)
- CSecurity Plan
- DNone of the above
15Select ALL of the correct responses. What does the information owner do when determining the impact of changes?
- ADocument in SAR for the AO to review
- BProvide written and signed report
- CReports significant changes in the security posture of the system
- DContinuously monitors the system or information environment
- EPeriodically assesses the quality of the security controls
16Select ALL of the correct responses. What types and levels of vulnerabilities should you consider?
- AInformation system level
- BPhysical security
- CMission/business process level
- DPeople
- EOrganization level
- FNone of the above
17Confidentiality, integrity, availability, authentication, and non-repudiation are all attributes of cybersecurity.
- ATrue
- BFalse
18What Risk Management Framework (RMF) step is designed to assess risk?
- AImplement Security Controls
- BCategorize System
- CAuthorize System
- DAssess Security Controls
19What is the last step in the Risk Management Framework (RMF)?
- AImplement Security Controls
- BAuthorize System
- CAssess Security Controls
- DCategorize System
- ESelect Security Controls
- FMonitor Security Controls
20Where is the implementation of security controls documented?
- ADoD architectures and standards
- BSystem Security Plan (SSP)
- CSecurity Technical Implementation Guide (STIG)
- DSecurity Requirements Guide (SRG)
21Why do you need to be aware of cybersecurity?
- ATo account for and eliminate all risk
- BTo appropriately manage risk by mitigating threats and vulnerabilities
- CTo ensure all appropriate measures are taken to protect a designated space and ensure only people with permission enter and leave it
- DTo uphold all elements of the National Industrial Security Program Operating Manual
22Select ALL of the correct responses. What are all cybersecurity attributes susceptible to?
- ADisclosure
- BAuthorization
- CVulnerabilities
- DThreats
23Which steps of the Risk Management Framework (RMF) are designed to evaluate risk?
- AMonitor Security Controls
- BAuthorize System
- CAssess Security Controls
- DNone of the above
- EAll of the above
24Evaluation ensures that new risks arising from changes are noticed and assessed.
- ATrue
- BFalse
25Select ALL of the correct responses. Which policies and DoD regulations set our cybersecurity standards?
- ADoD 8530.01, Cybersecurity Activities Support to DoD Information Network Operations
- BDoDI 8510.01, Risk Management Framework for DoD Information Technology
- CDoDI 8500.01, Cybersecurity
- DNone of the above
26Which of the following are areas within cybersecurity?
- AProcedural security
- BPhysical security
- CPersonnel security
- DAll of the above
27Adversarial threats are
- Anatural or man-made disasters, unusual natural events, or an infrastructure failure or outage.
- Bunintentional threats made by a single user or privileged user or administrator when performing their everyday responsibilities.
- Cfrom individual, group, organization, or nation-state seeking to exploit the organization's dependence on cyber resources.
- Dfailures of equipment, environmental controls, or software due to aging, resource depletion, or other circumstances.
28Select ALL of the correct responses. Security personnel need to have which of the following skills?
- ANew Technology and Equipment
- BSystem Categorization
- CTraining Others
- DCompilation and Data Aggregation
29Which of the following provides an overarching methodology to follow when managing cybersecurity risks?
- ASecurity Assessment Report (SAR)
- BRisk Management System
- CSecurity Technical Implementation Guide (STIG)
- DDepartment of Defense Security Skill Standard
30Engagement and collaboration between security, information technology, and cybersecurity personnel should be proactive and continuous.
- ATrue
- BFalse
31What are the cybersecurity attributes?
- AConfidentiality
- BIntegrity
- CAvailability
- DAuthentication
- ENon-repudiation
32What is the primary responsibility of security personnel?
- ADirect the operation of and assure the security of the global DoD network
- BCoordinate all DoD network operations
- CProtect classified information and controlled unclassified information from unauthorized disclosure
- DMonitor, evaluate, and provide advice to the Secretary of Defense
33Why do you need to be aware of cybersecurity?
- ATo uphold all elements of the national Security Program Operating Manual.
- BTo appropriately manage risk by mitigating threats and vulnerabilities.
- CTo examine your own actions and activities to uphold personal accountability
- DTo ensure all appropriate measures are taken to protect a place and ensure only people with permission enter and leave it.
34What is Security personnel’s primary skill in relationship to cybersecurity?
- AAnalyze
- BManage Risk
- CExecute Training
- DRespond to Incidents
35What are the components of the Risk Management System?
- ARevision
- BMitigation
- CAssessment
- DEvaluation
36What are the cybersecurity drivers?
- ANIST 800-30 Rev 1, Guide for conducting Risk Assessments
- BDoD 8530.01, Cybersecurity Activities Support to DoD Information Network Operations
- CDoD 8510.01, Risk Management Framework
- DDoD 8500.01, Cybersecurity
- EDoD Security Policy
37What are the steps in the Risk Management Framework (RMF)?
- AMonitor Security Controls
- BCategorize System
- CAuthorize System
- DAssess Security Controls
- ESelect Security Controls
- FImplement Security Controls
38Which skills do security personnel need?
- AProtect information systems
- BIdentify all cybersecurity concepts
- CIdentify fundamentals cybersecurity concepts that are related to the protection of classified and controlled unclassified information.
- DExamine their role in protecting DoD’s information systems and the information they process, transmit, and store.
39What threat environments should you consider?
- AAdversarial
- BEnvironmental
- CStructural
- DAccidental
40Which of the following are the activities that occur when performing RMF Step 2, Select Security Controls?
- ACommon Control Identification
- BMonitoring Strategy
- CSecurity Baseline and Overlay Selection
- DSecurity Plan Review Approval
41What activities occur during implementation of security controls?
- ACreate appropriate training and communication plans
- BEnsure consistency with DoD architectures
- CDocument security control implementation in the security plan
- DIdentify Security controls available for inheritance
42What should you look for when assessing vulnerabilities?
- AResidual Risk
- BEase
- CLikelihood
- DRelated Threats
- ERewards
43Which steps of the RMF are designed to mitigate risk?
- AAssess Security Controls
- BMonitor Security Controls
- CSelect Security Controls
- DAuthorize System
- EImplement Security Controls
- FCategorize System
44Which steps of the RMF are designed to evaluate risk?
- ASelect Security Controls
- BAssess Security Controls
- CMonitor Security Controls
- DAuthorize System
- ECategorize System
- FImplement Security Controls
45What activities occur when assessing security controls?
- APrepare the Plan of Action and Milestones (POA&M)
- BConduct final risk determination
- CDevelop, plan, and approve Security Assessment Plan
- DPrepare Security Assessment Report (SAR)
46Select ALL of the correct responses. Which of the following forms the basis for remediation actions?
- AOngoing monitoring activities
- BOutstanding items in the Plan of Action and Milestones (POA&M)
- CRisk assessment
- DAuthorizing Official (AO) report
47What activities occur when authorizing the system?
- AImplement decommissioning strategy
- BDevelop, review, and approve Security Assessment Plan
- CPrepare the Plan of Action and Milestones (POA&M)
- DSubmit security authorization package
48Which of the following are areas within cybersecurity?
- AProcedural security
- BPhysical security
- CPersonnel security
- DAll of the above
49What activities occur when monitoring security controls?
- APrepare the Plan of Action and Milestones
- BDevelop, review, and approve Security Assessment Plan
- CImplement decommissioning strategy
- DDetermine impact of changes
50Select ALL of the correct responses. What are the DoD cybersecurity policies?
- AOperational Resilience
- BRisk Management
- CPerformance
- DIdentity Assurance
- EMission Partners
51Select ALL of the correct responses. Which of the following are cybersecurity skill standards needed by security personnel?
- AConduct assessment and evaluation of all IT systems
- BIdentify and manage all cybersecurity concepts
- CExplain their role in protecting DoD's information systems
- DIdentify fundamental cybersecurity concepts that are related to the protection of classified and controlled unclassified information
52After you complete a risk management system component, you should constantly reassess as you deploy new solutions.
- ATrue
- BFalse
53Confidentiality is the only attribute susceptible to threats and vulnerabilities.
- ATrue
- BFalse
54Cybersecurity is important so that risk is eliminated.
- ATrue
- BFalse
55Categorize System is the RMF step designed to assess risk.
- ATrue
- BFalse
56Who prepares the Security Assessment Report (SAR)?
- AUSCYBERCOM
- BSecurity Controls Assessor (SCA)
- CSecurity Personnel
- DDoD CIO
57Select ALL of the correct responses. What are the attributes of cybersecurity?
- AConfidentiality
- BNon-repudiation
- CAuthentication
- DIntegrity
- EAvailability
- FAuthorization
58Select ALL of the correct responses. When performing risk assessment, security personnel do which of the following?
- AIdentify countermeasures to eliminate risk
- BIdentify and evaluate risks, impacts, and countermeasures
- CDetermine the extent of threat
59How do security personnel protect classified information and controlled unclassified information?
- AMinimize vulnerabilities
- BManage threats
- CRespond to incidents swiftly and appropriately
- DAll of the above
60Select ALL of the correct responses. Which steps of the Risk Management Framework (RMF) are designed to evaluate risk?
- AAuthorize System
- BImplement Security Controls
- CAssess Security Controls
- DCategorize System
- EMonitor Security Controls
- FSelect Security Controls
61Which role monitors, evaluates, and provides advice?
- ASecurity personnel
- BUS Cyber Command (USCYBERCOM)
- CDoD Chief Information Officer (CIO)
- DAuthorizing Official (AO)
62Which policies and DoD regulations set our cybersecurity standards?
- ADoDI 8500.01, Cybersecurity
- BDoDI 8510.01, Risk Management Framework for DoD Information Technology
- CNIST 800-30 Rev 1, Guide for Conducting Risk Assessments
- DAll of the above
63Select ALL of the correct responses. Which activities occur during Step 2, Select Security Controls?
- ASecurity Plan Review and Approval
- BUnique Control Identification
- CSecurity Plan Creation
- DMonitoring Strategy
- ECommon Control Identification
64Select ALL of the correct responses. Impact levels are used to perform which of the following?
- AOverlay selection
- BDocument the security plan
- CSecurity baseline
65When mitigating risk, what are your options?
- ALimitation
- BAcceptance
- CAvoidance
- DAll of the above
66What are the implied skills of security personnel?
- ACounsel stakeholders on security-related concerns
- BExecute security awareness training
- CAnalysis
- DAll of the above
67Security controls should not consider legacy security plans.
- ATrue
- BFalse
68What evolving threats are attempts by hackers to damage or destroy a computer network or system?
- AInsider Threat
- BSocial Media
- CCyber Attack
- DMobile Computing
69Select ALL of the correct responses. What are the Risk Management Framework (RMF) steps designed to mitigate risk?
- AAssess Security Controls
- BImplement Security Controls
- CCategorize System
- DSelect Security Control
70Who is responsible for final review and authorization?
- ASecurity Controls Assessor (SCA)
- BChief Information Officer (CIO)
- CSecurity personnel
- DAuthorizing Official (AO)
71Select Security Controls is the only Risk Management Framework (RMF) step designed to mitigate risk.
- ATrue
- BFalse
72The risk management system provides an overarching methodology to follow when managing cybersecurity risks.
- ATrue
- BFalse
73Select ALL of the correct responses. What should you look for when assessing vulnerabilities?
- ARelated threats
- BRewards
- CResidual risk
- DLikelihood
- EEase
74Security personnel must be able to identify all cybersecurity concepts.
- ATrue
- BFalse
75Vulnerabilities are weaknesses that could be exploited to gain unauthorized access to information on an information system.
- ATrue
- BFalse
76In which step of the Risk Management Framework (RMF) would you implement the decommissioning strategy?
- AStep 3 - Implement security controls
- BStep 4 – Assess security controls
- CStep 5 – Authorize system
- DStep 6 – Monitor security controls
Informationen
- Beschreibung
- QUESTIONS FROM THE STUDENT GUIDES
- Autor
- Casey Neville
- Sprache
- English
- Aufrufe
- 2.286
- Schlagwörter
- Bewertung
- 5,0 von 5 · 1 Bewertung Bewerte dieses Quiz