Information Security Flashcard 2

Front

Which of the following is NOT a component of the CIA triad in Information Security? Confidentiality, Availability, Integrity, Authorization

Back

Authorization

Front

Which of the following tools is primarily used to ensure confidentiality? Encryption, Hashing, Backups, Digital signatures

Back

Encryption

Front

Which type of attack directly impacts the availability of a system? Options: Phishing, DDoS, Ransomware, Man-in-the-middle

Back

DDoS

Front

What is the primary goal of an Advanced Persistent Threat (APT)?

Back

Steal sensitive data over time without detection

Front

Which of the following is an example of protecting data integrity? Options: Using multi-factor authentication, Encrypting sensitive documents, Running regular backups, Applying checksums to verify data accuracy

Back

Applying checksums to verify data accuracy

Front

Which cyber threat is characterized by an attacker pretending to be a trusted entity to trick individuals into revealing sensitive information?

Back

Phishing

Front

In the context of the document, what does 'Availability' refer to?

Back

Ensuring that systems and data are accessible to authorized users when needed

Front

Which type of cyberattack involves intercepting and altering communication between two parties?

Back

Man-in-the-middle attack

Front

Which of the following best describes a ransomware attack?
Stealing data by posing as a legitimate user,
Encrypting files and demanding payment for decryption,
Intercepting network communications,
Flooding a server with traffic to disrupt service

Back

Encrypting files and demanding payment for decryption

Front

What is a common strategy to protect systems from insider threats? Options: Digital signatures, Employee training and monitoring, Firewalls, Encryption

Back

Employee training and monitoring