67 Question Sec+ Flashcard

Front

Which of the following best describes the CIA Triad? Options: Confidentiality, Integrity, Authentication; Confidentiality, Integrity, Availability; Control, Integrity, Availability; Compliance, Integrity, Authentication

Back

Confidentiality, Integrity, Availability

Answer explanation

The CIA Triad stands for Confidentiality, Integrity, and Availability. These three principles are essential for ensuring the security and reliability of information systems, making this the correct choice.

Front

What is the primary function of a firewall?

Back

Blocking unauthorized access while permitting legitimate communication

Answer explanation

The primary function of a firewall is to block unauthorized access while permitting legitimate communication, ensuring network security by controlling incoming and outgoing traffic.

Front

Which attack involves an attacker intercepting and modifying communications between two parties?

Back

Man-in-the-Middle (MitM)

Answer explanation

The Man-in-the-Middle (MitM) attack occurs when an attacker secretly intercepts and alters the communication between two parties, making it the correct choice. Other options like phishing, DoS, and SQL injection do not involve this type of interception.

Front

What is the purpose of multi-factor authentication (MFA)?

Back

To provide an additional layer of security by requiring two or more authentication factors

Answer explanation

The correct choice highlights that multi-factor authentication (MFA) adds an extra layer of security by requiring two or more authentication factors, making it harder for unauthorized users to gain access.

Front

Which of the following is an example of a physical security control? Antivirus software, Firewall, Security badge access, Password policy

Back

Security badge access

Answer explanation

Security badge access is a physical security control that restricts access to facilities. In contrast, antivirus software, firewalls, and password policies are examples of logical security controls.

Front

What type of malware disguises itself as legitimate software to trick users into installing it?

Back

Trojan Horse

Answer explanation

A Trojan Horse is a type of malware that pretends to be legitimate software, tricking users into installing it. Unlike worms or ransomware, it relies on user action to spread and execute.

Front

Which security measure is commonly used to prevent brute-force attacks?

Back

Account lockout policy

Answer explanation

An account lockout policy is designed to prevent brute-force attacks by temporarily locking accounts after a certain number of failed login attempts, thereby thwarting unauthorized access attempts.

Front

What is the main function of a VPN (Virtual Private Network)?

Back

To provide secure remote access by encrypting data transmission

Answer explanation

The main function of a VPN is to provide secure remote access by encrypting data transmission, ensuring privacy and security while accessing the internet or private networks.

Front

What does the principle of least privilege (PoLP) state?

Back

Users should only have the minimum access necessary to perform their job functions.

Answer explanation

The principle of least privilege (PoLP) states that users should only have the minimum access necessary to perform their job functions, ensuring security and reducing the risk of unauthorized access.

Front

What is the primary purpose of an Intrusion Detection System (IDS)?

Back

To detect and alert on suspicious activity

Answer explanation

The primary purpose of an Intrusion Detection System (IDS) is to detect and alert on suspicious activity within a network, rather than actively blocking access or replacing firewalls.