FedVTE Enterprise Cyber security Operations Review
Questions and Answers
The acronym VPN stands for: - Correct AnswersVirtual Private Network
Executives are responsible for managing and overseeing enterprise risk management. -
Correct AnswersTrue
The internal audit department is investigating a possible accounting breach. One of the
auditors is sent to interview the following employees: Employee A works in the accounts
receivable office and is in charge of entering data into the finance system; Employee B
works in the accounts payable office and is in charge of approving purchase orders;
Employee C is the manager of the finance department, supervises Employee A and
Employee B, and can perform the functions of both Employee A and Employee B. Which of
the following should the auditor suggest be done to avoid future security breaches? -
Correct AnswersThe manager should only be able to review the data and approve
purchase orders.
An electrical utility has employed a consultant to perform a controls assessment of the
personnel system, backend business operations, and the SCADA system used in their
facility. Which of the following correctly states the risk management options that the
consultant should use during the assessment? - Correct AnswersAvoid, transfer, mitigate,
and accept.
The acronym SOA stands for: - Correct AnswersStatement of Applicability
Which of the following are steps in the risk management process? - Correct AnswersAll of
the Above
Cybersecurity should be involved throughout the entire system development life cycle. -
Correct AnswersTrue
