INTRODUCTION – Security Domains

TEST YOUR KNOWLEDGE: MORE ABOUT THE CISSP SECURITY DOMAINS

1. Fill in the blank: The _____ domain is focused on access and authorization to keep data secure by making sure that users follow established policies to control and manage assets.

2. What is the focus of the security and risk management domain?

3. In which domain would a security professional conduct security control testing; collect and analyze data; and perform security audits to monitor for risks, threats, and vulnerabilities?

4. Fill in the blank: The _____ domain concerns conducting investigations and implementing preventive measures.

TEST YOUR KNOWLEDGE: NAVIGATE THREATS, RISKS, AND VULNERABILITIES

1. What is a vulnerability?

2. Fill in the blank: Information protected by regulations or laws is a _____. If it is compromised, there is likely to be a severe negative impact on an organization’s finances, operations, or reputation.

3. What are the key impacts of threats, risks, and vulnerabilities? Select three answers.

4. Fill in the blank: The steps in the Risk Management Framework (RMF) are prepare, _____, select, implement, assess, authorize, and monitor.

5. Phishing exploits human error to acquire sensitive data and private information.

MODULE 1 CHALLENGE

1. Fill in the blank: Security posture refers to an organization’s ability to react to change and manage its defense of _____ and critical assets.

2. Which of the following examples are key focus areas of the security and risk management domain? Select three answers.

3. How does business continuity enable an organization to maintain everyday productivity?

4. Fill in the blank: According to the concept of shared responsibility, employees can help lower risk to physical and virtual security by _____. Select two answers.

5. A security analyst ensures that employees are able to review only the data they need to do their jobs. Which security domain does this scenario relate to?

6. Which of the following activities may be part of establishing security controls? Select three answers.

7. When working in the software development security domain, which of the following are tasks that security team members may complete during various phases of the software development lifecycle? Select three answers.

8. Which of the following statements accurately describe risk? Select all that apply.

9. A business experiences an attack. As a result, a major news outlet reports the attack, which creates bad press for the organization. What type of consequence does this scenario describe?

10. Fill in the blank: In the Risk Management Framework (RMF), the _____ step might involve implementing a plan to change password requirements in order to reduce requests to reset employee passwords.

11. Fill in the blank: Security _____ refers to an organization’s ability to manage its defense of critical assets and data, as well as its ability to react to change.

12. Which of the following examples are key focus areas of the security and risk management domain? Select three answers.

13. What term describes an organization’s ability to maintain its everyday productivity by establishing risk disaster recovery plans?

14. A security analyst verifies users and monitors employees’ login attempts. The goal is to keep the business’s assets secure. Which security domain does this scenario describe?

15. Fill in the blank: In the Risk Management Framework (RMF), the _____ step involves knowing how systems are operating and assessing whether or not those systems support the organization’s security goals.

16. What security concept involves all individuals in an organization taking an active role in reducing risk and maintaining security?

17. A security analyst is asked to conduct a security audit to identify vulnerabilities. Which security domain is this task related to?

18. Fill in the blank: When working in the software development security domain, security team members can use each phase of the software development _____ to conduct security reviews and ensure that security can be fully integrated into software products.

19. Which of the following statements accurately describe risk? Select all that apply.

20. A business experiences an attack. As a result, its critical business operations are interrupted and it faces regulatory fines. What type of consequence does this scenario describe?

21. In the Risk Management Framework (RMF), which step notes the importance of being accountable for potential risks and may involve generating reports or developing plans of action?

22. What is the goal of business continuity?