Question 1

A company assesses the potential loss from a data breach involving customer information. If the estimated loss per record is $100 and the breach could expose 800 records, what is the Single-Loss Expectancy (SLE)?

Options :

A : $12,500.00

B : $8,000.00

C : $1,250.00

D : $80,000.00

Answer: D

Question 2

Which of the following information security publications provides standards for cloud service providers' security measures and can be used to complement the NIST Cybersecurity Framework outcomes for cloud migrations and adoptions?

Options :

A : FedRAMP

B : PCI-DSS

C : HIPAA

D : OWASP

Answer: A

Question 3

A software company identifies a significant risk of source code leaks due to inadequate version control and employee access management. What key elements should be included in their risk management plan to address this issue effectively?

Options :

A : Increase general cybersecurity awareness training, especially social engineering attacks, for all employees.

B : Outsource source code development to external contractors to reduce internal risks

C : Implement robust version control systems and restrict access to sensitive information based on roles and responsibilities

D : Conduct a public relations campaign to reassure stakeholders about data security and emphasize cybersecurity training

Answer: C

Question 4

In the context of cybersecurity investments, what does Total Cost of Ownership (TCO) encompass?

Options :

A : The price comparison between different cybersecurity vendors over time

B : The potential savings gained by preventing cybersecurity incidents over time

C : The calculation of all costs associated with a cybersecurity solution throughout its lifecycle

D : The initial purchase price of cybersecurity hardware and software only

Answer: C

Question 5

Which of the following is a goal within the Detect function of the NIST Cybersecurity Framework?

Options :

A : To establish processes for identifying cybersecurity events

B : To restore services and capabilities after a cybersecurity incident

C : To develop strategies for reacting to a cybersecurity incident

D : To ensure continuous monitoring to find cybersecurity events quickly

Answer: D