vmartinez

 

Fill in the blank: Security information and event _____ (SIEM) tools enable security professionals to identify and analyze threats, risks, and vulnerabilities.

 

• monitoring
• mitigation
• maturity
• management

 

 

What is regulatory compliance?

 

• Sites and services that require complex passwords to access
• Laws and guidelines that require implementation of security standards
• Expenses and fines associated with vulnerabilities
• Threats and risks from employees and external vendors

 

 

A security professional receives an alert about an unknown user accessing a system within their organization. They attempt to identify, analyze, and preserve the associated criminal evidence. What security task does this scenario describe?

 

• Resolving error messages
• Programming with code
• Software upgrades
• Computer forensics

 

 

What is identity theft?

 

• Failing to maintain and secure user, customer, and vendor data
• Trying to gain access to an organization’s private networks
• Stealing personal information to commit fraud while impersonating a victim
• A data breach that affects an entire organization

 

 

Someone outside of an organization attempts to gain access to its private information. What type of threat does this scenario describe?

 

• Internal
• External
• Ethical
• Accidental

 

 

A security professional collaborates with information technology teams to deploy an application that helps identify risks and vulnerabilities. What does this scenario describe?

 

• Upgrading network capacity
• Installing detection software
• Conducting a security audit
• Ethical hacking