Sec+ - 1A - Security Concepts

What are the three properties of secure information in the CIA Triad?

• Confidentiality, Integrity, and Authentication

• Confidentiality, Integrity, and Availability

• • Confidentiality, Authentication, and Authorization

• Confidentiality, Availability, and Authorization

What does non-repudiation refer to in information security?

• • The inability to deny actions like creating or modifying resources

• The ability to deny actions like creating or modifying resources

• The encryption of resources to prevent unauthorized access

• • The verification of resources through digital signatures

What does non-repudiation refer to in information security?

• • The inability to deny actions like creating or modifying resources

• The ability to deny actions like creating or modifying resources

• The encryption of resources to prevent unauthorized access

• • The verification of resources through digital signatures

What are the five core functions of the cybersecurity framework developed by NIST?

• Identify, Protect, Detect, Respond, Recover

• Authenticate, Authorize, Encrypt, Monitor, Remediate

• Analyze, Prevent, Mitigate, Control, Remediate

• • Secure, Monitor, Protect, Recover, Analyze

What is the purpose of gap analysis in information security?

• To identify discrepancies between an organization's security systems and recommended frameworks

• To prioritize investments in cybersecurity

• To ensure compliance with regulations

• All of the above

What is the main purpose of access control in information security?

• To ensure the confidentiality of data

• To enforce the CIA Triad

• • To prevent unauthorized access to resources

• To monitor network traffic

Which of the following processes is NOT part of Identity and Access Management (IAM)?

• Identification

• Authentication

• Authorization

• Auditing

What does the term "AAA" refer to in information security?

• • Authentication, Authorization, Accounting

• Authorization, Auditing, Availability

• • Access, Authentication, Authorization

• • Authentication, Availability, Accounting

In IAM, what does the process of identification involve?

• • Proving that a subject is who or what it claims to be

• Creating an account or ID that uniquely represents the user, device, or process

• • Tracking authorized usage of a resource

• • Determining what rights subjects should have on each resource

Which process in IAM determines what rights subjects should have on each resource?

• Identification

• Authentication

• Authorization

• Accounting