Quiz Module 5

What does not Cyber Resilience Mean?

The ability of a company to enhance business acceleration (enterprise resiliency) through the prevention of cyber threats is known as cyber resilience.

The ability of a company to enhance business acceleration (enterprise resiliency) through the mitigation of cyber threats is known as cyber resilience.

The ability of a company to enhance business acceleration (enterprise resiliency) through the ignoring of cyber threats is known as cyber resilience.

The ability of a company to enhance business acceleration (enterprise resiliency) through the recovery of cyber threats is known as cyber resilience.

Which of the given premises of Cyber Resilience is not true?

The concept refers to the ability to carry on achieving targets in the face of challenging cyber events such as cyberattacks, natural disasters, or economic crises

An organization’s cyber resilience is its capacity to defend itself against, detect, respond to, and recover from cyberattacks.

Cyber resiliency’s main goal is to aid an organization to flourish in challenging situations (such as financial volatility, crisis, pandemic, etc.).

A cyber-resilient company cannot improve its competitive advantage by maximizing the value it generates for its clients and operating efficiently and effectively.

Which is not a reason for cyber resilience being important?

Mitigating financial loss

Decreasing customer trust and business

Increasing competitive advantage and maintaining business continuity

Keeping customer data safe

Which are the followings are the benefits of cyber resilience?
I.Reduce financial losses;
II.Meet legal and regulatory requirements;
III.Improve your security culture and internal processes; and
IV.Protect your brand and reputation.

I and II

II and IV

I, III and IV

All of them

What does operational security consist?
I.Patch and update management
II.Vulnerability monitoring
III.Fraud prevention
IV.Cyber intelligence

I and II

II and IV

I, III and IV

All of them

How can not an organization achieve cyber resilience?

Enhancing security

Taking no notice for attacks

Responding to attacks

Recovering from attacks

Who are in a business should be responsible for cybersecurity?

Business owners.

IT specialists.

Managers.

All staff members should know some cybersecurity basics to reduce the risk of cyber attacks.

Which is not the types of cybersecurity?
I.Network security
II.Building Security
III.Internet of Things (IoT) security
IV.Application Security

Only I.

II and IV.

I, III and IV.

All of them.

Which of the given promises is not true about the key difference between cybersecurity and cyber resilience?

Cybersecurity is the capacity of a business to ward off and mitigate the growing threat posed by cybercrime

They are exactly the same concepts

Cyber resilience is the capacity to avert damage (to its systems, procedures, and reputation) and continue operations after data or systems are compromised.

Cyber resilience means accepting the fact that no cybersecurity solution is perfect or can protect against all cyber threats

Which is not belong to the top 5 cybersecurity threats to manage?

Malware

Phishing

Insider Threats

Earthquake

Which should not be in the cybersecurity checklist?

User Education

Application Security

Building Trust

Network Security

Which of the given promises about cyber resilience and cyber security is not true?

Cyber resilience and cyber security are only an issue for big companies.

Businesses must develop resilience against a variety of calamities besides just pandemics.

Cyber security is responding to cyber-attacks, whereas cyber resilience is more about anticipating potential attacks.

Cyber security relates to technologies and procedures aimed to safeguard computer systems, networks, and data against cyber risks.

«The practice of preventing digital attacks on programs, networks, and systems is known as cybersecurity.»

True.

False.

A cyber resilience assessment supposes that an organization deploys its resources, what are these resources?

People
Data
Technology
Equipment

I and II

II and IV

I, III and IV

All of them

A four-part method for cyber resilience is proposed by the common cyber resilience framework, which is not?

Manage and protect

Identify and detect

Ignore and Delete

Respond and recover

Which of the following indicators can not be used to determine the organization’s culture and leadership’s adaptive capacity?

Leadership

Staff engagement

Planning strategies

Situation awareness

Which of the following indicators listed below do not identify the organization’s ability to leverage internal and external relationships when needed?

Effective partnerships

Stress testing plans

Leveraging knowledge

Breaking silos

«Plans, policies, and procedures for cybersecurity are evaluated on a regular basis to guarantee that cybersecurity programs are effective and prepared for use in the event of an attack.»

True.

False.

An improved comprehension of an organization’s cybersecurity posture is provided by a cyber resilience review. The evaluation does not offer:

Enhanced awareness of the need for efficient cybersecurity management across the entire organization

A look at the capabilities that are most crucial to ensuring the continuity of essential services in times of crisis

A proof of managerial problems and failure.

A driver of conversation between participants from various organizational functional areas

A checklist can be used to prepare a cyber-resilience assessment, which of the following should be in it ?
I.Identify dangers and Examine your network for vulnerabilities and threats
II.Find out about possible cyberattacks
III.Examine the organization’s current attack response
IV.Secure current networks, software, and systems.

Only I

II, III and IV

I, III and IV

All of them

Your score is

GO BACK to module #5