A regulated organization experienced a security breach that exposed a list of customer names with corresponding PH dat a. Which of the following is the best reason for developing the organization's communication plans?

• A.For the organization's public relations department to have a standard notification
• B.To ensure incidents are immediately reported to a regulatory agency
• C.To automate the notification to customers who were impacted by the breach
• D.To have approval from executive leadership on when communication should occur

Comment: *

Name: *

Email: *

Verification: *

The management team requests monthly KPI reports on the company's cybersecurity program. Which of the following KPIs would identify how long a security threat goes unnoticed in the environment?

• A.Employee turnover
• B.Intrusion attempts
• C.Mean time to detect
• D.Level of preparedness

Comment: *

Name: *

Email: *

Verification: *

Which of the following describes a contract that is used to define the various levels of maintenance to be provided by an external business vendor in a secure environment?

• A.MOU
• B.NDA
• C.BIA
• D.SLA

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity analyst is recording the following details
* ID
* Name
* Description
* Classification of information
* Responsible party
In which of the following documents is the analyst recording this information?

• A.Risk register
• B.Change control documentation
• C.Incident response playbook
• D.Incident response plan

Comment: *

Name: *

Email: *

Verification: *

An analyst finds that an IP address outside of the company network that is being used to run network and vulnerability scans across external-facing assets. Which of the following steps of an attack framework is the analyst witnessing?

• A.Exploitation
• B.Reconnaissance
• C.Command and control
• D.Actions on objectives

Comment: *

Name: *

Email: *

Verification: *