IBM Cybersecurity Analyst Professional Certificate • STUDY MODE

PRACTICE QUIZ

QUESTION 1 OF 27

Which of the bad guys are described as "They are "in" an organization but are human and make mistakes"? Correct, these bad guys typically inadvertently open and email, etc.

Malicious Insiders

Inadvertant ActorCorrect Answer

Employees

Outsiders

QUESTION 2 OF 27

Which is NOT one of the security controls? Correct, this is NOT one of the security controls.

TestingCorrect Answer

Technical

Physical

Operational

QUESTION 3 OF 27

What year did the European Union start enforcing GDPR? Correct, the GDPR came into effect in May of 2018.

2018Correct Answer

2017

2016

2014

QUESTION 4 OF 27

Which three (3) of these obligations are part of the 5 key GDPR obligations? Partially correct, this is one of 3 key GDPR obligations. SYSTEM AND ORGANIZATION CONTROLS REPORT (SOC) OVERVIEW

Accountability of ComplianceCorrect Answer

Security of Public Data

ConsentCorrect Answer

Rights of EU Data SubjectCorrect Answer

QUESTION 5 OF 27

Which is the foundational principle that everyone will get during a SOC audit? Correct, this is the single foundational principle everyone will get. INDUSTRY STANDARDS

Privacy

Availability

SecurityCorrect Answer

Confidentiality

QUESTION 6 OF 27

The HIPAA security rule requires covered entites to maintain which two (2) reasonable safeguards for protecting e-PHI? Partially correct, this is one of two HIPAA security rule safeguards.

Informational

TechnicalCorrect Answer

Operational

PhysicalCorrect Answer

QUESTION 7 OF 27

HIPAA Administrative safeguards include which two (2) of the following? Partially correct, this is one of the administrative safeguards. Partially correct, this is one of the administrative safeguards.

Security PersonnelCorrect Answer

Workforce Training and ManagementCorrect Answer

Access Controls

Integrity Controls

QUESTION 8 OF 27

PCI includes 264 requirements grouped under how many main requirements? Correct, PCI includes 12 main requirements. CIS CRITICAL SECURITY CONTROLS

12Correct Answer

QUESTION 9 OF 27

If you are a mature organization, which CIS Controls Implementation Group would you use? Correct, Implementation Group 3 is for mature organizations. COMPLIANCE FRAMEWORKS AND INDUSTRY STANDARDS

Implementation Group 3Correct Answer

Implementation Group 1

Do not need a controls implementation group due to maturity of my organization

Implementation Group 2

QUESTION 10 OF 27

A security attack is defined as which of the following?

An event on a system or network detected by a device.

An event that has been reviewed by analysts and deemed worthy of deeper investigation.

An event that has been identified by correlation and analytics tools as a malicious activity.Correct Answer

All cybersecurity events.

QUESTION 11 OF 27

Which order does a typical compliance process follow?

Readiness assessment, establish scope, testing/auditing, management reporting, gap remediation

Establish scope, readiness assessment, testing/auditing, management reporting, gap remediation

Readiness assessment, establish scope, gap remediation, testing/auditing, management reporting

Establish scope, readiness assessment, gap remediation, testing/auditing, management reportingCorrect Answer

QUESTION 12 OF 27

Under GDPR, who determines the purpose and means of processing of personal data?

ControllerCorrect Answer

Analyst

Processor

Data Subject

QUESTION 13 OF 27

Under the International Organization for Standardization (ISO), which standard focuses on Privacy?

ISO 27003

ISO 27018Correct Answer

ISO 27017

ISO 27001

QUESTION 14 OF 27

Which SOC report is closest to an ISO report?

Type 1Correct Answer

Type 2

Type 1 and Type 2

Type 3

QUESTION 15 OF 27

What is an auditor looking for when they test the control for implementation over an entire offering with no gaps?

CompletenessCorrect Answer

Accuracy

Timeliness

Consistency

QUESTION 16 OF 27

Who is the governing entity for HIPAA?

Cyber Security and Infrastructure Security Agency (CISA)

Department of Homeland Security

US Department of Health and Human Services Office of Civil RightsCorrect Answer

US Legislature

QUESTION 17 OF 27

One PCI Requirement is using an approved scanning vendor to scan at what frequency?

Weekly

Monthly

QuarterlyCorrect Answer

Annually

QUESTION 18 OF 27

In which CIS control category will you find Incident Response and Management?

Advanced

Basic

OrganizationalCorrect Answer

Foundational

QUESTION 19 OF 27

Which of the bad guys are described as “They are “in” an organization but are human and make mistakes”?

Malicious Insiders

Inadvertant ActorCorrect Answer

Employees

Outsiders

QUESTION 20 OF 27

Which is NOT one of the security controls?

TestingCorrect Answer

Technical

Physical

Operational

QUESTION 21 OF 27

What year did the European Union start enforcing GDPR?

2018Correct Answer

2017

2016

2014

QUESTION 22 OF 27

Which three (3) of these obligations are part of the 5 key GDPR obligations?

Accountability of ComplianceCorrect Answer

Security of Public Data

ConsentCorrect Answer

Rights of EU Data SubjectCorrect Answer

QUESTION 23 OF 27

Which is the foundational principle that everyone will get during a SOC audit?

Privacy

Availability

SecurityCorrect Answer

Confidentiality

QUESTION 24 OF 27

The HIPAA security rule requires covered entites to maintain which two (2) reasonable safeguards for protecting e-PHI?

Informational

TechnicalCorrect Answer

Operational

PhysicalCorrect Answer

QUESTION 25 OF 27

HIPAA Administrative safeguards include which two (2) of the following?

Security PersonnelCorrect Answer

Workforce Training and ManagementCorrect Answer

Access Controls

Integrity Controls

QUESTION 26 OF 27

PCI includes 264 requirements grouped under how many main requirements?

12Correct Answer

QUESTION 27 OF 27

If you are a mature organization, which CIS Controls Implementation Group would you use?

Implementation Group 3Correct Answer

Implementation Group 1

Do not need a controls implementation group due to maturity of my organization

Implementation Group 2

Ready to test your recall?

Which of the bad guys are described as "They are "in" an organization but are human and make mistakes"? Correct, these bad guys typically inadvertently open and email, etc.

Malicious Insiders

Inadvertant Actor

Employees

Outsiders

How confident are you in this answer?

PRACTICE QUIZ

Which of the bad guys are described as "They are "in" an organization but are human and make mistakes"? Correct, these bad guys typically inadvertently open and email, etc.

Which is NOT one of the security controls? Correct, this is NOT one of the security controls.

What year did the European Union start enforcing GDPR? Correct, the GDPR came into effect in May of 2018.

Which three (3) of these obligations are part of the 5 key GDPR obligations? Partially correct, this is one of 3 key GDPR obligations. SYSTEM AND ORGANIZATION CONTROLS REPORT (SOC) OVERVIEW

Which is the foundational principle that everyone will get during a SOC audit? Correct, this is the single foundational principle everyone will get. INDUSTRY STANDARDS

The HIPAA security rule requires covered entites to maintain which two (2) reasonable safeguards for protecting e-PHI? Partially correct, this is one of two HIPAA security rule safeguards.

HIPAA Administrative safeguards include which two (2) of the following? Partially correct, this is one of the administrative safeguards. Partially correct, this is one of the administrative safeguards.

PCI includes 264 requirements grouped under how many main requirements? Correct, PCI includes 12 main requirements. CIS CRITICAL SECURITY CONTROLS

If you are a mature organization, which CIS Controls Implementation Group would you use? Correct, Implementation Group 3 is for mature organizations. COMPLIANCE FRAMEWORKS AND INDUSTRY STANDARDS

A security attack is defined as which of the following?

Which order does a typical compliance process follow?

Under GDPR, who determines the purpose and means of processing of personal data?

Under the International Organization for Standardization (ISO), which standard focuses on Privacy?

Which SOC report is closest to an ISO report?

What is an auditor looking for when they test the control for implementation over an entire offering with no gaps?

Who is the governing entity for HIPAA?

One PCI Requirement is using an approved scanning vendor to scan at what frequency?

In which CIS control category will you find Incident Response and Management?

Which of the bad guys are described as &#8220;They are &#8220;in&#8221; an organization but are human and make mistakes&#8221;?

Which is NOT one of the security controls?

What year did the European Union start enforcing GDPR?

Which three (3) of these obligations are part of the 5 key GDPR obligations?

Which is the foundational principle that everyone will get during a SOC audit?

The HIPAA security rule requires covered entites to maintain which two (2) reasonable safeguards for protecting e-PHI?

HIPAA Administrative safeguards include which two (2) of the following?

PCI includes 264 requirements grouped under how many main requirements?

If you are a mature organization, which CIS Controls Implementation Group would you use?

Ready to test your recall?

Which of the bad guys are described as “They are “in” an organization but are human and make mistakes”?