WebXam Cram 1.9.23

What does the acronym CIA refer to when discussing information security?

• Confidentiality, Integrity, and Availability
• Computers, Internet, and Applications
• Central Intelligence Agency
• Certified Internal Auditor

Why is it important to ensure the confidentiality, integrity, and availability of information?

• To protect sensitive data from unauthorized access or tampering
• To prevent system failures and ensure uninterrupted access to information
• To comply with legal and regulatory requirements
• All of the above

What is the process of verifying the identity of a user or device attempting to access a computer system or network called?

• a) Authentication
• b) Authorization
• c) Auditing
• d) Access control

What is the process of granting or denying access to resources or services based on the identity of a user or device?

• a) Authentication
• b) Authorization
• c) Auditing
• d) Access control

What is the process of monitoring and recording activity in a system to help identify and prevent security breaches?

• a) Authentication
• b) Authorization
• c) Auditing
• d) Access control

How is a user's identity usually verified during the authentication process?

• a) By using a password
• b) By using a fingerprint
• c) By using a security token
• d) All of the above

Which of the following is NOT a commonly used method of computer authentication?

• A) Password-based authentication
• B) Biometric authentication
• C) Token-based authentication
• D) Astrology-based authentication

Which of the following is NOT a potential concern associated with the use of biometric authentication?

• A) Privacy concerns about the collection and storage of biometric data
• B) The risk of false positives or false negatives in the identification process
• C) The possibility of biometric data being compromised or stolen
• D) The fact that biometric authentication systems are too convenient for users

Which of the following is NOT a common objective of a computer audit?

• A) To evaluate the effectiveness and efficiency of computer systems and processes
• B) To assess the level of compliance with laws, regulations, and internal policies
• C) To identify and mitigate potential security vulnerabilities
• D) To determine the accuracy and completeness of financial records

What is the main purpose of multilevel security for computer networks?

• A) To protect against external threats such as hackers
• B) To enforce access controls based on user roles and permissions
• C) To prevent unauthorized access to sensitive data
• D) All of the above