SPECIALIST EXAM QUESTIONS AND ANSWERS WITH
COMPLETE SOLUTIONS GRADED A++
Why Conduct a cybersecurity Vulnerability Assessment?
Critical step in evaluating cyber risk
Evaluates the IACS design, Implementation, configuration, operation and management
Determines the adequacy of security measures and identify security deficiencies
Types of Vulnerability Assessments
High Level (Gap assessment) - walk thru + drawing review
Passive - adds traffic analysis and ARP tables
Active - Automated tools to scan network
Penetration test
Risk Assessment report documents
Gap assessment report
Vulnerability assessment report
Risk Assessment report
Zone and conduit diagrams
Cybersecurity requirements specifications
4 T's of managing risk
, Tolerate
Transfer
Terminate
Treat
5 D's of risk treatment
Deter
Detect
Delay
Deny
Defeat
Network Management Tools
Solarwinds
Spiceworks
Microsoft assessment and planning toolkit (MAP)
Software asset management tools (SAM)
Microsoft Assessment and Planning toolkit (MAP)
Microsoft system center
System information for windows (SIW)
Configuration Management Tools
MDT Autosave
Rockwell Assetcentre
PAS Integrity
System hardening