Which statement best describes cybersecurity?
Answer
The ongoing application of best practices to protect information, people, and environments
Explanation
### Why this is right
Cybersecurity is described as an ongoing application of best practices, rather than a one-time technical purchase. Its scope includes digital information and the safety of people and environments.
### The concept
A cybersecurity program must be maintained because systems, business activities, and threats change. It includes actions to prevent incidents, detect threats, and respond when incidents occur. Software can be one control, but it cannot replace the continuing work of managing security.
### The other options
- **A. A one-time installation of security software**: Software may support security, but installing it once does not address changing risks or ongoing maintenance.
- **C. A process focused only on stopping external attackers**: Cybersecurity also includes internal risks, vulnerabilities, detection, response, and protection of people and environments.
- **D. A legal review performed after a data breach**: Legal review may follow an incident, but it is only one possible response activity.
### Terms
- **Best practices**: Accepted methods used to support reliable and secure work.
- **Incident**: An event that harms or may harm systems, data, people, or operations.
### Remember
Cybersecurity is continuing organizational work, not a one-time software purchase.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free