{{asɛmtiNe Ɔkyerɛwfo}} | Nhomakorabea | Nneɛma a ɛma wotumi yɛ ade

1

Which of the following best explains why an organization might implement a specific security control?

A. To match the appearance of its competitors’ security policies

B. To comply with legal requirements related to the data it handles

C. To make the system more visually appealing to users

D. To avoid the need for employee cybersecurity training

1

When selecting a cybersecurity control, organizations often prefer solutions that are:

A. Complex and expensive

B. Time-consuming to maintain

C. Cost effective and easy to implement

D. Rarely tested in real-world environments

1

Why is a cost-benefit analysis important before implementing a control?

A. It helps determine if the control is visually appealing to users

B. It automatically increases employee productivity

C. It guarantees that the organization will never be attacked

D. It ensures the control’s cost is less than the expected loss from an attack

1

Which type of events will organizations often address first when implementing controls?

A. Low-probability, low-impact events

B. High-probability, high-impact events

C. High-probability, low-impact events

D. Low-probability, high-impact events

1

What should a cyber defender consider when determining the most relevant control?

A. How an adversary could exploit a vulnerability and how to prevent, detect, or correct it

B. Whether the control is the newest technology available

C. How to ensure the control works without testing it

D. Whether the control will reduce the size of the IT department

1

A small medical clinic must comply with strict health data privacy laws. They are considering several security controls:
A: An expensive AI-based threat detection system
B: Encrypted data storage that meets health data compliance standards
C: Security awareness posters in the break room
D: Biometric door locks for all patient rooms
Which control should they prioritize to meet their legal obligations?

A. AI-based threat detection system

B. Encrypted data storage

C. Security awareness posters

D. Biometric door locks

1

A tech startup with a small but highly skilled in-house development team wants to improve security without adding new subscription costs. They prefer a solution that lets them leverage existing employee expertise instead of hiring outside vendors.
Which option best aligns with their goals?

A. Contract a 24/7 security operations center (SOC) at a high monthly cost

B. Purchase a cloud-based firewall with automated patching at a moderate subscription cost

C. Build a custom intrusion detection tool in-house using their current development team

D. Avoid implementing any new security measures to save money

1

A bank’s risk assessment team identifies several potential threats:
A phishing attack targeting employees (high probability, medium impact)
A rare but devastating natural disaster that could destroy the data center (low probability, high impact)
Occasional slowdowns caused by minor network misconfigurations (medium probability, low impact)
Given limited resources, which risk should they mitigate first?

A. Phishing attack targeting employees

B. Natural disaster destroying the data center

C. Minor network misconfigurations

D. They should address all risks equally

AP Cybersecurity: 1.3C - Formative Assessment

AP Cybersecurity: 1.3C - Formative Assessment

Which of the following best explains why an organization might implement a specific security control?

When selecting a cybersecurity control, organizations often prefer solutions that are:

Why is a cost-benefit analysis important before implementing a control?

Which type of events will organizations often address first when implementing controls?

What should a cyber defender consider when determining the most relevant control?

A tech startup with a small but highly skilled in-house development team wants to improve security without adding new subscription costs. They prefer a solution that lets them leverage existing employee expertise instead of hiring outside vendors.
Which option best aligns with their goals?

Which of the following best explains why an organization might implement a specific security control?

When selecting a cybersecurity control, organizations often prefer solutions that are:

Why is a cost-benefit analysis important before implementing a control?

Which type of events will organizations often address first when implementing controls?

What should a cyber defender consider when determining the most relevant control?

A tech startup with a small but highly skilled in-house development team wants to improve security without adding new subscription costs. They prefer a solution that lets them leverage existing employee expertise instead of hiring outside vendors.
Which option best aligns with their goals?

AP Cybersecurity: 1.3C - Formative Assessment

AP Cybersecurity: 1.3C - Formative Assessment

Which of the following best explains why an organization might implement a specific security control?

When selecting a cybersecurity control, organizations often prefer solutions that are:

Why is a cost-benefit analysis important before implementing a control?

Which type of events will organizations often address first when implementing controls?

What should a cyber defender consider when determining the most relevant control?

A tech startup with a small but highly skilled in-house development team wants to improve security without adding new subscription costs. They prefer a solution that lets them leverage existing employee expertise instead of hiring outside vendors.Which option best aligns with their goals?

Which of the following best explains why an organization might implement a specific security control?

When selecting a cybersecurity control, organizations often prefer solutions that are:

Why is a cost-benefit analysis important before implementing a control?

Which type of events will organizations often address first when implementing controls?

What should a cyber defender consider when determining the most relevant control?

A tech startup with a small but highly skilled in-house development team wants to improve security without adding new subscription costs. They prefer a solution that lets them leverage existing employee expertise instead of hiring outside vendors.Which option best aligns with their goals?

A tech startup with a small but highly skilled in-house development team wants to improve security without adding new subscription costs. They prefer a solution that lets them leverage existing employee expertise instead of hiring outside vendors.
Which option best aligns with their goals?

A tech startup with a small but highly skilled in-house development team wants to improve security without adding new subscription costs. They prefer a solution that lets them leverage existing employee expertise instead of hiring outside vendors.
Which option best aligns with their goals?