FedVTE Cyber Risk Management for Technicians Questions with Answers
In order to automate host characteristic monitoring you can compare baselines and
... [Show More] snapshots with syslog. - CORRECT ANSWER False
The following should be taken into account when accepting the residual risk inherent in the project. - CORRECT ANSWER All of the above
What is the high water mark for an information system? - CORRECT ANSWER Highest Potential Impact value assigned to each Security Objective (AIC) for all Security Categories resident on the system and the overall classification of the system.
Which of the following describes NetScan Tools Pro? - CORRECT ANSWER B. A powerful command line packet analyzer
C. A tool that provides advanced network trace routing
D. A collection of Internet information gathering and network troubleshooting utilities
FIPS 200 is: - CORRECT ANSWER A short document that describes the minimum security requirements for information and information systems
Which risk comes from a failure of the controls to properly mitigate risk? - CORRECT ANSWER A. Inherent risk
C. Control Risk
D. All of the above
Open Source Security (OSSEC) is what? - CORRECT ANSWER A host based security system that monitors for changes
What tool would be best to automatically detect your network and construct a complete and easy to view network map? - CORRECT ANSWER LANsurveyor
Which NIST special publication is a guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach? - CORRECT ANSWER NIST SP 800 37
Which of the following is a part of the Examine Method? - CORRECT ANSWER Inspecting the physical security measures
If the cost of controls exceeds the benefit the organization may choose to accept the risk instead. - CORRECT ANSWER True
Which of the following families of controls belongs to the technical class of controls? - CORRECT ANSWER Identification and Authentication
Which tier of Risk Management is associated with Enterprise Architecture? - CORRECT ANSWER Tier 2 Mission (Business Process)
In NIST SP 800 53 the security control structure consists of all the following components except for: - CORRECT ANSWER All of these are in the security control structure:
- Priority and baseline allocation
- Supplemental guidance
- Control enhancements
Kismet is different from a normal network sniffer such as Wireshark or tcpdump because it separates and identifies different wireless networks in the area. - CORRECT ANSWER True
What is the order of the Change Control Process? - CORRECT ANSWER A. Request : Approval : Build : Impact Assessment : If successful Implement
B. Request : Impact Assessment : Approval : Build and or Test : Implement
D. Request : Impact Assessment : Build and or Test : Approval : Implement
The threat source is highly motivated and sufficiently capable and controls to prevent the vulnerability from being exercised are ineffective. Which likelihood rating does this describe? - CORRECT ANSWER High
Which of the following is not part of the process for assessing security controls according to NIST SP 800 53A 1? - CORRECT ANSWER A. Study
C. Conduct
D. Analyze
Which step of a risk assessment uses the history of system attacks? - CORRECT ANSWER Step 2: Threat Identification
In risk management people and information and technology are examples of? - CORRECT ANSWER Assets
What type of analysis involves using scales to suit circumstances and allows for quick identification of potential risks as well as vulnerable assets and resources? - CORRECT ANSWER B. Audit Analysis
C. Qualitative Analysis
D. Cost/benefit analysis
NIST SP 800 30 defines risk as a function of the likelihood of a given threat source exercising a particular potential vulnerability and the resulting impact of that adverse event on the organization. - CORRECT ANSWER True
One strategy for determining the proper level of acceptable risk is to: - CORRECT ANSWER Determine a point where cost of mitigation is less than cost of loss
Which OCTAVE process involves collecting information about important assets and security requirements and threats and current organizational strengths and vulnerabilities from managers of selected operational areas? - CORRECT ANSWER Identify Operational Area Knowledge
Which of the following is a step in detecting and analysing host changes? - CORRECT ANSWER All of the above :
- Create a current snapshot of your host
- Create a baseline of your host
- Compare your snapshot to your baseline [Show Less]