Thembi designs, maintains, and builds her organization’s cybersecurity architecture. She monitors systems and networks for unusual activities and investigates any that she discovers. She also tests system and network security regularly to find any vulnerabilities.

Which cybersecurity role does Thembi serve in her organization?

Armand is a cybersecurity consultant hired to help a company reduce its operational risk to an acceptable level. He assesses the company’s security strategy and recommends that the company use the defense in depth strategy.

Which of the following recommendations might Armand make to implement defense in depth?

You access a website using the same URL that you frequently use to access it. You notice that the website looks different now, and the URL seems slightly different in the address bar.

Which type of cyberattack does this scenario represent?

Lakshmi’s job pays her $1000 every week. But when she checks her most recent pay stub, she notices that she earned only $900. Her company investigates the issue and finds that Lakshmi’s earnings have been altered without authorization. 

Which objective of the CIA triad best describes the company’s need to protect payroll data from unauthorized modification? 

John is a risk assessment specialist. Recently, his company’s vulnerability analyst identified a vulnerability in a crucial system that the company relies on for its operations. John needs to assess this risk to determine whether it requires urgent attention. 

Which equation should John use to calculate the risk value? 

Rhonda is a cybersecurity professional for a major tech company. One day, she receives an alert indicating that someone or something has gained unauthorized access to the company’s system. Rhonda investigates the event and decides that the intruder is a cyberattacker. To predict techniques that the attacker might use next, Rhonda checks the MITRE ATT&CK matrix. View the provided screenshot for reference; it shows an excerpt from the matrix.

Which of the following items listed in the MITRE ATT&CK matrix is a technique that the attacker might use as part of the attack?

Select all that apply.

Your organization has just suffered a data breach. Your supervisor is concerned about the potential cost of the breach and asks you to list the biggest contributors to a breach’s cost.

What should you list as the most significant contributor to the cost of a data breach?

Cheluchi is a first-year university student considering a career in cybersecurity. She attends a campus job fair and speaks with a cybersecurity analyst, Sven. She asks Sven, “What skills do I need to work in cybersecurity?” 

What should Sven say to answer Cheluchi’s question? 

Emma is a cybersecurity professional at an international organization. Throughout a typical day, Emma uses various baseline cybersecurity skills, including security assurance.

Which of the following tasks relates to security assurance?

Steffen is an experienced IT professional interviewing for an open cybersecurity analyst role at an organization. The interviewer asks Steffen to describe several soft, or workplace, skills that he possesses to demonstrate his suitability for the job.

Which of the following skills are important for Steffen to describe?

Select all that apply.