Domain 1 Security Concepts Test

Front

What are the four main categories of security controls used to mitigate the risk of malicious attacks? Options: Technical, operational, directive, and corrective; Technical, managerial, operational, and physical; Preventive, deterrent, detective, and corrective; Firewall, IPS, MFA solutions, and antivirus software

Back

Technical, managerial, operational, and physical

Front

Which type of security control aims to keep people out of systems and prevent attacks?

Back

Preventive

Front

What is an example of a deterrent security control? Options: Intrusion detection system, Firewall rule configurations, Security awareness training, Warning signs like "No Trespassing"

Back

Warning signs like "No Trespassing"

Front

Which security control type is designed to alert you when a particular event occurs, such as an unauthorized user accessing a system? Options: Preventive, Deterrent, Detective

Back

Detective

Front

What is an example of corrective security control?

Back

Patching known vulnerabilities on hardware

Front

Which security control type is put in place to satisfy the requirement for a security measure deemed too difficult or impractical to implement now?

Back

Compensating

Front

What is an example of a directive security control?

Back

Defining password security complexity and mandating regular password changes

Front

What are the three fundamental principles of information security, also known as the CIA Triad?

Back

Confidentiality, Integrity, and Availability

Front

Which principle of the CIA Triad ensures that information remains accurate and complete, and hasn’t been tampered with or modified in any unauthorized way?

Back

Integrity

Front

What principle of the CIA Triad ensures that authorized users have timely and reliable access to information and systems when needed?

Back

Integrity