PECB Certified ISO/IEC 27032 Foundation Practice Tests

Explanation

Ransomware is a type of malware that encrypts data and demands payment for restoration. Phishing involves tricking users into revealing sensitive information. DDoS attacks overwhelm servers to cause unavailability. Social engineering manipulates people to reveal confidential information without necessarily encrypting data.

Explanation

The NIST Cybersecurity Framework 2.0 includes six functions: GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, and RECOVER. The GOVERN function was added in version 2.0 to emphasize governance and risk management oversight. ISO/IEC 27032 and 27001 do not use this specific function structure, and MITRE ATT&CK is a knowledge base of adversary behaviors.

Explanation

Preventive controls are designed to stop incidents from happening in the first place, such as access controls or encryption. Detective controls identify incidents as they occur or after the fact, while corrective controls mitigate impact and restore systems after an incident. Managerial is a type of control related to oversight and planning, not a functional classification like preventive, detective, or corrective.

Explanation

Ransomware is a specific type of malware that encrypts data and demands payment (usually in cryptocurrency) for the restoration of access. While it is a form of malware, 'Ransomware' is the precise term for this behavior. Trojans disguise themselves as legitimate software, and Worms self-replicate across networks, neither of which inherently involves encryption for extortion.

Explanation

Controls are classified by function into preventive, detective, and corrective. A control that monitors and alerts on suspicious activity is detective because it identifies incidents as they occur or after they have occurred. Preventive controls stop incidents, and corrective controls restore systems after an incident.