vmartinez

 

Which domain involves defining security goals and objectives, risk mitigation, compliance, business continuity, and the law?

 

• Security assessment and testing
• Security architecture and engineering
• Identity and access management
• Security and risk management

 

 

A security professional is asked to teach employees how to avoid inadvertently revealing sensitive data. What type of training should they conduct?

 

• Training about network optimization
• Training about business continuity
• Training about security architecture
• Training about social engineering

 

 

Fill in the blank: Social engineering is a _____ that exploits human error to gain private information, access, or valuables.

 

• type of malware
• replicating virus
• manipulation technique
• business breach

 

 

Fill in the blank: Social engineering is a manipulation technique that exploits _____ error to gain access to private information.

 

• network
• human
• computer
• coding

 

 

What historical event resulted in one of the largest known thefts of sensitive data, including social security numbers and credit card numbers?

 

• LoveLetter attack
• Equifax breach
• Morris worm
• Brain virus

 

 

What is the term for software that is designed to harm devices or networks?

 

• Bug
• Social application
• Malware
• Error message