(ISC)2 Certified in Cybersecurity Practice Exam

What is defined as an observable occurrence in a network or system?

1. Event

2. Incident

3. Exploit

4. Sensor

The correct answer is: Event

The term that refers to an observable occurrence in a network or system is "event." In cybersecurity, an event can include any action or occurrence that can be detected by systems or users, such as user logins, file access, or system alerts. Events are crucial for monitoring because they provide the data necessary for understanding the state of the network or system at any given time. In contrast, an "incident" typically refers to a security event that results in an adverse outcome, such as a breach or a denial-of-service attack. An incident requires a response and further investigation. "Exploit," on the other hand, refers to a means of taking advantage of a vulnerability to compromise a system, and "sensor" refers to devices or software that gather data about events happening in a network or system. Understanding these distinctions helps in the broader context of security monitoring and incident response.