INFORMATION ASSURANCE AND SECURITY / REVIEW

What is the primary goal of Information Assurance and Security?

• A. To protect against all cyber threats
• B. To achieve 100% availability of data
• C. To ensure the confidentiality, integrity, and availability of information
• D. To maximize network speed

Which of the following is not one of the three pillars of information assurance?

• A. Confidentiality
• B. Integrity
• C. Availability
• D. Accountability

What is the primary purpose of a risk assessment in Information Assurance and Security?

• A. To eliminate all risks
• B. To identify and prioritize potential risks
• C. To assign blame for security incidents
• D. To increase data availability

In the context of Information Assurance and Security, what is the primary goal of incident response?

• A. To prevent all security incidents
• B. To identify and address security incidents in a timely manner
• C. To hold individuals accountable for incidents
• D. To ensure 100% data integrity

A company conducts a thorough assessment to determine the likelihood and potential impact of a security breach. This assessment is part of:

• A. Risk management
• B. Incident response
• C. Security controls
• D. Confidentiality protection

Which of the following is NOT considered a security control?

• A. Intrusion Detection System (IDS)
• B. Password policy
• C. Security awareness training
• D. Antivirus software

A situation where an employee accidentally sends a sensitive document to the wrong recipient is an example of:

• A. A security control failure
• B. An incident response success
• C. An integrity breach
• D. A risk assessment

Which of the following best defines confidentiality in the context of information security?

• A. Ensuring data is always available
• B. Protecting data from unauthorized access
• C. Ensuring data is always accurate
• D. Protecting data from loss

What are the three primary components of the CIA triad in information security?

• A. Confidentiality, Integrity, Authentication
• B. Confidentiality, Integrity, Availability
• C. Confidentiality, Availability, Authorization
• D. Availability, Authorization, Authentication

Which of the following is an example of a confidentiality threat?

• A. A server outage preventing access to data
• B. A virus corrupting a file
• C. A hacker gaining unauthorized access to sensitive data
• D. Accidental deletion of a file by an employee