Information Security Flashcard

Front

What does the term 'information security' refer to?

Back

The term 'information security' refers to the practice of protecting information by mitigating information risks.

Front

Why is information security important?

Back

Information security is important for protecting sensitive data, ensuring privacy, preventing financial losses, and maintaining trust in digital systems.

Front

What are the three main goals of information security? Options: backup, recovery, and disaster planning; authentication, authorization, and accounting; confidentiality, integrity, and availability; privacy, compliance, and risk management

Back

confidentiality, integrity, and availability

Front

What is the difference between confidentiality and integrity in information security?

Back

Confidentiality protects information from unauthorized access, while integrity ensures the accuracy and completeness of information.

Front

What are some common threats to information security?

Back

malware, phishing attacks, social engineering, insider threats, physical theft or loss of devices

Front

What is the purpose of encryption in information security?

Back

The purpose of encryption in information security is to protect sensitive data and ensure confidentiality.

Front

What is a firewall and how does it enhance information security?

Back

A firewall is a network security device that enhances information security by monitoring and controlling network traffic based on predetermined security rules.

Front

What is the role of passwords in information security?

Back

Passwords provide authentication and access control in information security.

Front

What is the concept of 'least privilege' in information security?

Back

Granting users the minimum level of access necessary to perform their tasks or functions.

Front

What are some best practices for ensuring information security? Options: Implement strong passwords, regularly update software and systems, use encryption for sensitive data, implement multi-factor authentication, regularly back up data, train employees on security protocols, and regularly monitor and audit systems for vulnerabilities or breaches.

Back

Implement strong passwords, regularly update software and systems, use encryption for sensitive data, implement multi-factor authentication, regularly back up data, train employees on security protocols, and regularly monitor and audit systems for vulnerabilities or breaches.