Which is an example of privacy regulation at the state government level in the U.S.?

What is the term for the policies and technologies implemented to protect, limit, monitor, audit, and govern identities with access to sensitive data and resources?

You have configured audit settings in your organization's cloud services in the event of a security incident. What type of security control is an audit trail?

What is the name for a short-term interruption in electrical power supply?

Your security team recommends adding a layer of defense against emerging persistent threats and zero-day exploits for all endpoints on your network. The solution should offer protection from external threats for network-connected devices, regardless of operating system. Which solution is best suited to meet this requirement?

Which is not a threat modeling methodology?

You are working in the security operations center analyzing traffic on your network. You detect what you believe to be a port scan. What does this mean?

The ASD Top Four are application whitelisting, patching of applications, patching of operating systems, and limiting administrative privileges. What percent of breaches do these account for?

FUD is expensive and often causes high drama over low risk. Which computer chip exploits were reported by CNN as needing to be completely replaced, but were later fixed with firmware updates?

To prevent an incident from overwhelming resources, _ is necessary.

Where would you record risks that have been identified and their details, such as their ID and name, classification of information, and the risk owner?