PECB Lead-Cybersecurity-Manager 問題集

質問 1：
Whatis an advantage of properly implementing a security operations center (SOC) within an organization?
A. The SOC facilitates continuous monitoring and analysis of an organization'sactivities, leading to enhanced security incident detection
B. The SOC promotes seamless collaboration between different teams and departments, enhancing overall organizational security
C. The SOC ensures immediate and absolute prevention of all cybersecurity incidents
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which of the following standards provides guidelines 10 plan and prepare for Incident response and extract valuable Insights from such responses?
A. ISO/IEC 27035 3
B. ISO/IEC 27035-2
C. ISO/IEC 27035-1
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Scenario 5:Pilotron is a large manufacturer known for its electric vehicles that use renewable energy. One of Its objectives Is 10 make the world a cleaner place by reducing the consumption of fossil fuels. In addition to electric vehicles, Pilotron also offers solar roof and advanced battery technology, all manufactured at its factory in Bastogne. Belgium. As one of the most Innovative manufacturers in Europe, Pilotron invests heavily in research and development to create unique components, such as motors, sensors, and batteries. In addillon, it places a strong emphasis on delivering high-quality products, and requires all employees to undergo an intensive onboarding program that includes hands-on training.
Pilotron did not prioritize the establishment of a cybersecurity program to protect its information. This became evident when a frustrated employee took advantage of the company's lack of cybersecurity measures. The employee was aware that Pilotron's existing security measures could easily be evaded The company became aware of the incident after five weeks, when a sudden surge in network data transfer raised suspicions upon investigation. Pilotron discovered that the employee had multiple requests for access to software development resources that were unrelated to their daily tasks By using a false user name and avoiding the implemented cybersecurity controls, the employee directly modified the code of one of Pilotron's products. This unauthorized code change enabled the employee to transfer highly sensitive data to external parties Knowing that insider threats pose a significant risk and the existing security controls were ineffective. Pilotron decided to shift its cybersecurity focus toward proactive detection and prevention strategies. It implemented a security software that detects unusual access patterns, large data upload, and credential abuse Additionally, Pilotron recognized the need to help improve the security of Its systems by Isolating devices (PCs. servers) on the opposite sides of a firewall.
The company also implemented an identity management solution to ensure the verification of Individuals requesting access. It decided to implement a mechanism that ensured only authorized individuals can access sensitive systems and data. In addition to the traditional username and password, employees were now required to provide a unique personal identifier, such as a fingerprint, as well as a one-time verification code generated through a mobile app Moreover, in order to enhance security measures and gain the benefits of cloud computing, Pilotron decided to leverage cloud based services. A kiv factor in Pilotroo's decision was the capability to construct and oversee its personalized Infrastructure Instead of depending on pre-set platforms or software applications, the company could craft its virtualized environments. The significant level of customization is of utmost importance to Pilotron since it enables adjusting its infrastructure to align with the specific requirements of its projects and clients.
Based on the scenario above, answer the following question:
Based on scenario 5. what type o# mechanism did Pilotron implement to ensure only authorized Individuals can access sensitive systems and data'
A. Symmetric cryptography
B. Single Sign-on
C. Three-factor authentication
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Scenario 2:Euro Tech Solutions Is a leading technology company operating in Europe that specializes In providing Innovative IT solutions With a strong reputation for reliability and excellence. EuroTech Solutions offers a range of services, including software development, cloud computing, and IT consulting. The company is dedicated to delivering cutting-edge technology solutions that drive digital transformation and enhance operational efficiency for its clients.
Recently, the company was subject to a cyberattack that significantly impeded its operations and negatively impacted Its reputation. The cyberattack resulted in a major data breach, where the customers' data and sensitive Information ware leaked. As such, EuroTech Solutions identified the need to improve its cybersecurity measures and decided 1o implement o comprehensive cybersecurity program.
EuroTech Solutions decided to use ISO.'I EC 27032 and the NIST Cybersecurity Framework as references and incorporate their principles and recommendations into its cybersecurity program. The company decided to rapidly implement the cybersecurity program by adhering to the guidelines of these two standards, and proceed with continual improvement (hereafter.
Initially, the company conducted a comprehensive analysis of its strengths, weaknesses, opportunities, and threats to evaluate its cybersecurity measures. This analysis helped the company to identify the desired stale of its cybersecurity controls. Then, it identified the processes and cybersecurity controls that are in place, and conducted a gap analysis to effectively determine the gap between the desired state and current state of the cybersecurity controls. The cybersecurity program included business and IT-related functions and was separated into three phases
1. Cybersecurity program and governance
2. Security operations and incident response
3. Testing, monitoring, and improvement
With this program, the company aimedto strengthen the resilience ofthe digital infrastructure through advanced threat detection, real time monitoring, and proactive incident response. Additionally, it decided to droit a comprehensive and clear cybersecurity policy as part of its overall cybersecurity program The drafting process involved conducting a thorough research and analysis of existing cybersecurity frameworks Once the initial draft was prepared, the policy was reviewed, and then approved by senior management. After finalizing the cybersecurity policy, EuroTech Solutions took a proactive approach to its initial publication. The policy was communicated to all employees through various channels, including internal communications, employee training sessions, and the company's intranet network.
Based on the scenario above, answer the following question
Did EuroTech Solutions follow the sequence of steps appropriately when It conducted the gap analysis?
A. No, the targets for cybersecurity controls should be set after determining the cybersecurity controls in place
B. Yes. the company followed the sequence of steps appropriately
C. No, the gap analysis should be conducted before determining the controls in place
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Scenario 3:EsteeMed is a cardiovascular institute located in Orlando. Florida H Is known for tis exceptional cardiovascular and thoracic services and offers a range of advanced procedures, including vascular surgery, heart valve surgery, arrhythmia and ablation, and lead extraction. With a dedicated team of over 30 cardiologists and cardiovascular surgeons, supported by more than IUU specialized nurses and technicians, EsteeMed Is driven by a noble mission to save lives Every year. it provides its services to over 50,000 patients from across the globe.
As Its reputation continued to grow. EsteeMed recognized the importance of protecting Its critical assets. It Identified these assets and implemented the necessary measures to ensure their security Employing a widely adopted approach to Information security governance. EsteeMed established an organizational structure that connects the cybersecurity team with the information security sector under the IT Department.
Soon after these changes, there was an incident where an unauthorized employee transferred highly restricted patient data to the cloud The Incident was detected by Tony, the IT specialist. As no specific guidelines were in place to address such unlikely scenarios, Tony promptly reported the incident to his colleagues and, together. they alerted the board of managers Following that, the management of EsteeMed arranged a meeting with their cloud provider to address the situation.
During the meeting, the representatives of the cloud provider assured the management of the EsteeMed that the situation will be managed effectively The cloud provider considered the existingsecurity measures sufficient to ensure the confidentiality, Integrity, and availability of the transferred data Additionally, they proposed a premium cloud security package that could offer enhanced protection for assets of this nature.
Subsequently, EsteeMed's management conducted an internal meeting following the discussion with the cloud provider.
After thorough discussions, the management determined that the associated costs of implementing further security measures outweigh the potential risks at the present lime Therefore, they decided to accept the actual risk level for the time being. The likelihood of a similar incident occurring in the future was considered low.
Furthermore, the cloud provider had already implemented robust security protocols.
To ensure effective risk management. EsteeMed had documented and reported its risk management process and outcomes through appropriate mechanisms, it recognized that decisions about the creation, retention, and handling of documented information should consider various factors. These factors include aspects such as the intended use of the Information. Its sensitivity, and the external and internal context in which It operates.
Lastly. EsteeMed identified and recorded its assets in an inventory to ensure their protection. The inventory contained detailed information such as the type of assets, their size, location, owner, and backup information.
Based on the scenario above, answer the following question:
Based on scenario 3. EsteeMed's inventory of assets included detailed information on the type of assets, their size, location, owner, and backup information. Is this a good practice to follow?
A. No,it is not necessary to include detailed information in the inventory as it should only specify the asset type and owner
B. No,the backup information should not be included in the inventory of assets
C. Yes,the inventory should contain information on the type of assets, their size, location, owner, and backup information
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following statements regarding best describes vulnerability assessment?
A. Vulnerability assessment focuses on minimizing network downtime
B. Vulnerability assessment combines automated testing with expert analysis
C. Vulnerability assessment exploits vulnerabilities in multiple assets
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Scenario 4:SynthiTech is ahuge global Technology company thatprovides Innovative software solutions and cybersecurity services to businesses in various industries, including finance, healthcare, and telecommunications. It is committed to deliver cutting-edge technology solutions while prioritizing the security and protection of its clients' digital assets The company adopted a mode) designed to ensure efficient operations and meet the specific needs of different market segments across the world Within this structure, the company's divisions are divided into financial services, healthcare solutions, telecommunications, and research and development To establish a robust cybersecurity program, SymhiTech established a cybersecurity program team consisting of several professionals that would be responsible for protecting its digital assets and ensuring the availability, integrity, and confidentiality of information, advising the cybersecurity manager in addressing any risks that arise, and assisting in strategic decisions. In addition, the team was responsible for ensuring that the program Is properly Implemented and maintained Understanding the importance of effectively managing (he company's assets loensureoperational efficiency and protect critical resources, the team created an inventory of SynthiTech's assets. The team initially identified all assets, as well as their location and status. The assets were included in the inventory, which wasregularlyupdated to reflect organizational changes In addition, the team regularly assessed the risk associated with each digital asset.
SynthiTech follows a systematic approach to identify, assess, and mitigate potential risks. This involves conducting risk assessments to Identify vulnerabilities and potential threats that may impact its assets and operations. Its cybersecurity program team tested SynthiTech's ICT system from the viewpoint of a threat source and identified potential failures in the IC1 system protection scheme. I hey also collaborated with other divisions to assess the impact and likelihood of risk and developed appropriate risk mitigation strategies. Then, the team implemented security controls, such as firewalls, Intrusion detection systems, and encryption, to ensure protection against the Identified risks. The activities of therisk treatment plan to be undertaken were ranked based on the level of risk and urgency of the treatment.
The company recognizes that effective risk management is an ongoing process and ensures monitoring, evaluation, and continual improvement of the cybersecunty program to adapt to security challenges and technological advancements.
Based on the scenario above, answer the following question:
What type of organizational structure did SynthiTech adopt?
A. Matrix
B. Flat-archy
C. Divisional
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Which of the following activities does not ensure the ongoing security of an Intrusion Detection System (IDS)?
A. Encrypting IDS management communications
B. Reporting IDS alerts of malicious transactions to interested parties
C. Creating unique user and administrator account for every IDS system
正解：B
解説: (Topexam メンバーにのみ表示されます)