Lesson 1: Fundamental Security Concepts and Frameworks

Question 1

What is information security?

Answer 1

The practice of protecting data resources from unauthorized access, attacks, theft, or damage, ensuring confidentiality, integrity, and availability of information.

Question 2

Why is information security important?

Answer 2

It is crucial for maintaining trust and compliance with legal and regulatory requirements, safeguarding sensitive data from breaches.

Question 3

What does the CIA Triad stand for?

Answer 3

Confidentiality, Integrity, Availability

Question 4

What is the purpose of Confidentiality in information security?

Answer 4

Ensures that only authorized individuals can access sensitive information, often implemented through encryption and access controls.

Question 5

What is the purpose of Integrity in information security?

Answer 5

Guarantees that data is accurate and unaltered during storage and transmission, using techniques like checksums and hashing.

Question 6

What is the goal of Availability in information security?

Answer 6

Ensures that information is accessible to authorized users when needed, often supported by redundancy and failover systems.

Question 7

What is Non-Repudiation?

Answer 7

A principle that ensures individuals cannot deny their actions, such as creating or modifying data, often implemented through digital signatures and logging.

Question 8

What is the purpose of a cybersecurity framework?

Answer 8

Provides guidelines for securing processing hardware and software, ensuring a structured approach to managing cybersecurity risks.
It helps organizations establish a baseline for security practices and compliance with industry standards.

Question 9

What are the five functions of the NIST Cybersecurity Framework?

Answer 9

• Identify
• Protect
• Detect
• Respond
• Recover

Question 10

In the NIST Cybersecurity Framework, what is the purpose of Identify?

Answer 10

Develop security policies and evaluate risks to understand the organization’s security posture.

Question 11

In the NIST Cybersecurity Framework, what is the purpose of Protect?

Answer 11

Implement measures to secure IT hardware and software throughout their lifecycle, including access controls and encryption.

Question 12

In the NIST Cybersecurity Framework, what is the purpose of Detect?

Answer 12

Monitor systems and controls to identify potential threats and vulnerabilities in real-time.

Question 13

In the NIST Cybersecurity Framework, what is the purpose of Respond?

Answer 13

Develop and implement response plans to analyze and eradicate threats effectively.

Question 14

In the NIST Cybersecurity Framework, what is the purpose of Recover?

Answer 14

Restore systems and data after an attack, ensuring business continuity and minimal downtime.

Question 15

What is gap analysis in the context of cybersecurity?

Answer 15

Identifies deviations between an organization’s current security systems and required framework standards, highlighting areas for improvement.

Question 16

What is the purpose for doing a gap analysis?

Answer 16

It serves as a tool for organizations to objectively evaluate their cybersecurity capabilities and prioritize investments in security measures.

Question 17

What processes are involved in gap analysis?

Answer 17

Assessing existing controls against best practices and regulatory requirements, resulting in a report of deficiencies.

Question 18

What is the expected outcome from a gap analysis?

Answer 18

The expected outcome is that recommendations for remediation are provided which will guide the organization on how to enhance their security posture effectively.

Question 19

What is Access Control?

Answer 19

Ensures that information systems align with the goals of the CIA triad, protecting sensitive data from unauthorized access.

Question 20

What are the key processes involved in Access Control?

Answer 20

• Identification
• Authentication
• Authorization
• Accounting

Question 21

In Access Control, what is the purpose of Identification?

Answer 21

Involves creating unique identifiers for users, devices, or processes to establish a baseline for access.

Question 22

In Access Control, what is the purpose of Authentication?

Answer 22

Verifies the identity of users through credentials such as passwords or digital certificates.

Question 23

In Access Control, what is the purpose of Authorization?

Answer 23

Determines and enforces access rights based on established models. (ex. Discretionary, Mandatory)

Question 24

In Access Control, what is the purpose of Accounting?

Answer 24

Involves tracking and monitoring authorized usage, alerting on any unauthorized access attempts.

Question 25

What are the categories of security controls?

Answer 25

* Managerial Controls * Operational Controls * Technical Controls * Physical Controls

Question 26

In Security Controls, what is the purpose of the Managerial Controls? Provide an example

Answer 26

Focus on oversight and risk management. (ex. Risk Assessments)

Question 27

In Security Controls, what is the purpose of the Operational Controls? Provide an example

Answer 27

Primarily implemented by personnel. (ex. Training programs, Security Guards)

Question 28

In Security Controls, what is the purpose of the Technical Controls? Provide an example

Answer 28

Enforced through technology. (ex. Firewalls, Antivirus Software)

Question 29

In Security Controls, what is the purpose of the Physical Controls? Provide an example

Answer 29

Protect physical assets. (ex. Locks, Alarms)

Question 30

What are the functional types of security controls?

Answer 30

* Preventive Controls * Detective Controls * Corrective Controls * Directive Controls * Deterrent Controls * Compensating Controls

Question 31

For Security Control Functions, what is the purpose of the Preventive Controls? Provide an example

Answer 31

Aim to eliminate or reduce the likelihood of an attack. (ex. Firewalls, Antimalware)

Question 32

For Security Control Functions, what is the purpose of the Detective Controls? Provide an example

Answer 32

Identify and record intrusions during an attack. (ex. Intrusion Detection Systems)

Question 33

For Security Control Functions, what is the purpose of the Corrective Controls? Provide an example

Answer 33

Mitigate the impact of security breaches after they occur. (ex. Backup Systems)

Question 34

For Security Control Functions, what is the purpose of the Directive Controls? Provide an example

Answer 34

Establish rules of behavior. (ex. Security Policies)

Question 35

For Security Control Functions, what is the purpose of the Deterrent Controls? Provide an example

Answer 35

Discourage potential intrusions. (ex. Warning Signs)

Question 36

For Security Control Functions, what is the purpose of the Compensating Controls? Provide an example

Answer 36

Provide alternative methods to achieve security objectives when primary controls are not feasible. (ex. Backup Generator)

Question 37

What role is the CIO?

Answer 37

Chief Information Officer

Question 38

Who is the Chief Information Officer (CIO)?

Answer 38

Holds overall responsibility for IT and security strategy within the organization.

Question 39

What role is the CSO?

Answer 39

Chief Security Officer

Question 40

What role is the CISO?

Answer 40

Chief Information Security Officer

Question 41

What are the responsibilities of the Chief Security Officer (CSO) / Chief Information Security Officer (CISO)?

Answer 41

Manages dedicated security departments and oversees security initiatives.

Question 42

What role do Managers play in information security?

Answer 42

Responsible for specific domains, ensuring compliance with security policies in their areas.

Question 43

What is a Security Operations Center (SOC)?

Answer 43

Monitors and protects critical information assets, providing real-time threat detection and response.

Question 44

What is the purpose of DevSecOps?

Answer 44

Integrates security practices into software development and deployment processes, ensuring security is prioritized throughout the lifecycle.

Question 45

What is the function of incident response teams?

Answer 45

Handles security incidents and notifications, often organized into teams like CIRT, CSIRT, and CERT.

Question 46

Fill in the blank: Non-repudiation is vital in _______ contexts.

Answer 46

legal