Assessing Corporate Cybersecurityintermediate
Select ALL activities identified as ways to establish or sustain a secure posture through prevention.
Answer
Threat modeling, Risk assessment, Penetration testing
Explanation
### Why this is right
- **Threat modeling** identifies plausible threats and helps guide protective choices.
- **Risk assessment** evaluates risks so the organization can decide how to address them.
- **Penetration testing** tests security by examining whether weaknesses can be exploited.
### The concept
Prevention includes planned activities that establish and sustain a secure posture. It is broader than installing a technical product: policies, procedures, and training also contribute. Ignoring events is not prevention and conflicts with the need to observe the enterprise and respond in a timely manner.
### The other options
- **Ignoring security events until an incident is confirmed**: this delays observation and response rather than reducing the chance or impact of harm.
### Terms
- **Threat modeling**: a structured consideration of possible threats and how they could affect systems.
- **Risk assessment**: evaluation of risks to support decisions about controls and priorities.
- **Penetration testing**: testing that examines whether security weaknesses can be exploited.
### Remember
Prevention is a set of activities, not a promise that incidents cannot occur.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free