Security+ Fundamentals of INFOSEC

Which of the following is an example of a physical security control?

• Encryption
• Antivirus software
• Firewall
• Intrusion Detection System
• CCTV surveillance

What is the primary goal of authentication in information security?

• Ensuring availability
• Ensuring accountability
• Ensuring confidentiality
• Ensuring identification
• Ensuring integrity

What is the purpose of an Intrusion Detection System (IDS) in information security?

• To prevent unauthorized access
• To authenticate users
• To encrypt sensitive data
• To enforce security policies
• To monitor network traffic for suspicious activity

What is the main purpose of a firewall in information security?

• To securely store digital certificates
• To encrypt network traffic
• To prevent unauthorized access to a computer network
• To monitor network traffic for suspicious activity
• To detect and remove computer viruses

Which of the following is an example of a technical security control?

• Background checks for employees
• Incident response plan
• Security awareness training
• Security policies and procedures
• Biometric authentication

What is the purpose of data encryption in information security?(Choose all that apply)

• To ensure the confidentiality of data

• To monitor network traffic for suspicious activity
• To prevent unauthorized access to data
• To authenticate users
• To ensure the integrity of data

What is the main purpose of a Virtual Private Network (VPN) in information security?

• To monitor network traffic for suspicious activity
• To prevent unauthorized access to a computer network
• To enforce security policies
• To encrypt network traffic
• To authenticate users

What is the difference between a vulnerability and an exploit in information security?

• A vulnerability is a security control, while an exploit is a type of intrusion detection
• A vulnerability is an attack, while an exploit is a defense mechanism
• A vulnerability is a type of intrusion detection, while an exploit is a malicious software
• A vulnerability is a weakness in a system, while an exploit is an attack that takes advantage of that weakness
• A vulnerability is a malicious software, while an exploit is a security control

Which of the following is an example of a social engineering attack?(Choose all that apply)

• Denial of Service (DoS) attack
• Man-in-the-middle attack
• Pharming

• Zero-day exploit
• Phishing

Which of the following is NOT a common objective of information security?

• Authenticity
• Confidentiality
• Integrity
• Availability
• None of the above