OBJ 1 Needs to Know

Question 1

What does the acronym CIA stand for in information security?

Answer 1

Confidentiality, Integrity, Availability

Question 2

True or False: Confidentiality ensures that information is accessible only to authorized users.

Answer 2

True

Question 3

What is the primary goal of integrity in information security?

Answer 3

To ensure that data is accurate and unaltered.

Question 4

Fill in the blank: Availability ensures that information and resources are ______ when needed.

Answer 4

accessible

Question 5

Which of the following is a common method to ensure data confidentiality? A) Encryption B) Backup C) Firewall

Answer 5

A) Encryption

Question 6

What is the purpose of access controls in information security?

Answer 6

To restrict access to data and resources based on user roles.

Question 7

True or False: Multi-factor authentication increases security by requiring multiple forms of verification.

Answer 7

True

Question 8

What is a security policy?

Answer 8

A formal set of rules that govern how an organization manages its security.

Question 9

Which type of attack involves overwhelming a system with traffic? A) Phishing B) Denial of Service C) Man-in-the-Middle

Answer 9

B) Denial of Service

Question 10

What is the primary function of a firewall?

Answer 10

To monitor and control incoming and outgoing network traffic.

Question 11

What does the principle of least privilege entail?

Answer 11

Users should have the minimum level of access necessary to perform their tasks.

Question 12

Fill in the blank: A ______ is a malicious software designed to harm or exploit any programmable device.

Answer 12

virus

Question 13

True or False: Social engineering is a technique used to manipulate individuals into divulging confidential information.

Answer 13

True

Question 14

What is the difference between a threat and a vulnerability?

Answer 14

A threat is a potential danger, while a vulnerability is a weakness that can be exploited.

Question 15

Which of the following is an example of a physical security control? A) Encryption B) Security Guards C) Firewalls

Answer 15

B) Security Guards

Question 16

What is the purpose of incident response?

Answer 16

To manage and mitigate the impact of security breaches or attacks.

Question 17

Fill in the blank: A ______ is a documented set of procedures for addressing security incidents.

Answer 17

incident response plan

Question 18

True or False: Regular software updates can help mitigate security vulnerabilities.

Answer 18

True

Question 19

What is the role of an intrusion detection system (IDS)?

Answer 19

To monitor network traffic for suspicious activity and potential threats.

Question 20

What does the term ‘phishing’ refer to?

Answer 20

A fraudulent attempt to obtain sensitive information by impersonating a trustworthy entity.

Question 21

Which of the following is a strong password policy? A) Short and simple passwords B) Long passwords with special characters C) Using the same password for all accounts

Answer 21

B) Long passwords with special characters

Question 22

What is the purpose of a security audit?

Answer 22

To evaluate and improve an organization’s security measures.

Question 23

Fill in the blank: ______ is the process of converting plaintext into ciphertext to protect information.

Answer 23

Encryption

Question 24

Which security framework provides guidelines for managing cybersecurity risks?

Answer 24

NIST Cybersecurity Framework

Question 25

True or False: A VPN is used to create a secure connection over a less secure network.

Answer 25

True

Question 26

What does the term 'malware' encompass?

Answer 26

All types of malicious software, including viruses, worms, and spyware.

Question 27

What is the primary purpose of data loss prevention (DLP) technologies?

Answer 27

To prevent sensitive data from being accessed or transmitted by unauthorized users.

Question 28

Fill in the blank: A ______ is a type of attack that involves intercepting and altering communication between two parties.

Answer 28

Man-in-the-Middle attack

Question 29

What is the importance of security awareness training?

Answer 29

To educate employees about security risks and best practices to mitigate them.

Question 30

True or False: Strong authentication methods can include biometrics.

Answer 30

True

Question 31

Which of the following is an example of an administrative control? A) Employee training B) Firewalls C) Antivirus software

Answer 31

A) Employee training

Question 32

What is the function of a digital certificate?

Answer 32

To verify the identity of an entity in electronic transactions.

Question 33

Fill in the blank: The process of identifying and classifying data based on its sensitivity is known as ______.

Answer 33

data classification