IT Exam Items Repository

Last Updated: Jun 24, 2026
IT Exam Items Repository › Category: Cyber Threat Management
A company manages sensitive customer data for multiple clients. The current authentication mechanism to access the database is username and passphrase. The company is reviewing the risk of employee credential compromise that may lead to a data breach and decides to take action to mitigate the risk before further actions can be taken to eliminate the risk. Which action should the company take for now?
ITExamAnswers Editorial Team asked 4 years ago • ,
Which security management plan specifies a component that involves tracking the location and configuration of networked devices and software across an enterprise?
ITExam Editorial Team asked 6 years ago • , ,
Which activity is typically performed by a threat actor in the installation phase of the Cyber Kill Chain?
ITExam Editorial Team asked 6 years ago • , ,
Match the command line tool with its description.
ITExamAnswers Editorial Team asked 4 years ago • ,
What information does the SIEM network security management tool provide to network administrators?
ITExamAnswers Editorial Team asked 5 years ago • , ,
Which penetration test phase is concerned with conducting reconnaissance to gain information about the target network or device?
ITExamAnswers Editorial Team asked 4 years ago • ,
Which two types of controls are effective after a violation of a security policy occurs? (Choose two.)
ITExamAnswers Editorial Team asked 4 years ago • ,
What is the function of the Cloud Security Alliance (CSA)?
ITExamAnswers Editorial Team asked 4 years ago • ,
Which of the following principles is used by the U.S. government in its access control models?
ITExamAnswers Editorial Team asked 4 years ago • ,
An organization has hired a former hacker to test how well the organization would tolerate a real attack by using malicious techniques. What type of testing is the hacker performing for the organization?
ITExamAnswers Editorial Team asked 4 years ago • ,
When a server profile for an organization is being established, which element describes the TCP and UDP daemons and ports that are allowed to be open on the server?
ITExam Editorial Team asked 6 years ago • , ,
Match the intrusion event defined in the Diamond Model of intrusion to the description.
ITExam Editorial Team asked 6 years ago • , ,
Match the network profile element to the description. (Not all options are used.)
ITExam Editorial Team asked 6 years ago • , ,
Keeping data backups offsite is an example of which type of disaster recovery control?
ITExamAnswers Editorial Team asked 4 years ago • ,
Which threat is mitigated through user awareness training and tying security awareness to performance reviews?
ITExamAnswers Editorial Team asked 4 years ago • ,
« Previous123456…12Next »
Ask Question

About The Author

ITExam Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.