Confidently Practice Online with Free Lead-Cybersecurity-Manager Exam Cram

Which of the following examples is NOT a principle of COBIT 2019? 

Scenario 7:Established in 2005 in Arizona, the US. Hitec is one of The leading online retail companies. It Is

especially known for electronic devices, such as televisions, telephones, and laptops. Hitec strives to

continually enhance customer satisfaction and optimize its technology platforms and applications. the

company's website and mobile application provide a range of features designed to simplify the online

shopping experience, including customized product recommendations and a user-friendly search engine. The

system enables customers to easily track the progress of their orders made through any of Hitec's platforms, in

addition. Hitec employs a comprehensive customer management system to collect and manage customer

information, including payment history, order details, and individual preferences.

Recently. Hitec had to deal with a serious cybersecurity incident that resulted in a data breach. Following

numerous customer complaints about the malfunctioning of the ordering system. Hitec's engineers initiated an

investigation into their network. The investigation unveiled multiple instances of unauthorized access by two

distinct attackers. They gamed access sensitive customer information, such as credit card numbers and login

credentials. Instead of promptly sharing information about the detected threats with other companies in the

cybersecurity alliance and asking for help, Hitec chose to rely solely on its own detection and response

capabilities. After resolving the incident, the company publicly acknowledged falling victim to a data breach.

However, it refrained from disclosing specific details regarding the impact it had on its customers

Two weeks after the cyberattack, another retail company, Buyent, made an announcement regarding their

successful prevention of a similar data breach unlike Hitec. Buyent took a transparent approach by providing

detailed insights into the attacker's methods and the step-by-step procedures they employed to mitigate the

attack. As both companies were part of the same cybersecurity alliance, Buyent willingly shared the requested

information in accordance with their established information sharing and coordination framework, ensuring

that any personal data shared was processed in a manner that prevented direct attribution to specific data

subjects. This Involved utilizing additional information, which was kepi separately and secured through

technical and organizational measures.

To ensure secure transmission. Buyent sent links that required a password for access, protecting the encrypted

files sent to Hitec These files included comprehensive guidelines and approaches adopted hy Buyent to

effectively detect and respond to cybersecurity events.

Upon careful analysis of the provided Information. Hitec concluded that their previous attack was primarily

attributed to weaknesses in their detection capabilities in response. Hitec made strategic changes to their

procedures. They implemented the utilization of Darknet as a technical approach to detect suspicious and

malicious network activities. Furthermore, Hitec established a new security policy which required regular

network and system testing By implementing these controls. Hilec aimed to strengthen Us ability to identify

system vulnerabilities and threats, thereby boosting the overall cybersecurity defense.

Lastly, Hitec decided to contract a training provider to conduct cybersecurity training for its employees. They

agreed to provide a training session that covered essential cybersecurity practices applicable to all staff,

regardless of their roles within the company As the agreed upon training date approached, the training provider

requested the necessary documentation from Hitec. Including the cybersecurity policy and specific examples

related to the practices or guidelines employed by the company. After Hitec did not deliver the requested

resources, the training provider refused to conduct the training session.

Based on the scenario above, answer the following question:

What data protection technique did Buyem employ to safeguard personal data while sharing Information with

Hitec regarding the cyberattack Refer to scenario 7

Whatis an advantage of properly implementing a security operations center (SOC) within an organization? 

According to the NIST Cyber security Framework, which of the following steps involves Identifying related systems and assets, regulatory requirements, and the overall risk approach?

What is a single sign-on (SSO)?