Security Fundamentals & Risk Management

Question 1

What are the three components of the CIA triad?

Answer 1

Confidentiality, Integrity, Availability

Question 2

What is the difference between risk, threat, and vulnerability?

Answer 2

Risk = Threat x Vulnerability; threat is potential harm, vulnerability is a weakness

Question 3

Name key compliance frameworks relevant to security.

Answer 3

HIPAA, PCI-DSS, GDPR, SOX

Question 4

A company wants to ensure employees don’t leak sensitive information. Which principle of the CIA triad does this protect?

Answer 4

Confidentiality

Question 5

You’re assessing threats and vulnerabilities in a company’s infrastructure. What are you conducting?

Answer 5

Risk Assessment

Question 6

A compliance audit finds issues with PCI-DSS adherence. What type of data is likely involved?

Answer 6

Credit card/payment card data

Question 7

What is the primary purpose of a security control?

Answer 7

To mitigate risk