SECURITY BASICS AND IT PROFESSIONAL (SECURITY POLICIES)

What is the main purpose of a security policy in an organization?

• To block all incoming network traffic

• To ensure 100% system uptime

• To define guidelines and procedures for protecting assets and information

• To minimize software updates and patches

Which of the following is a key element of an effective security policy?

• Providing unlimited access to sensitive data

• Regularly updating the policy without communication

• Enforcing strong password requirements

• Allowing employees to share their login credentials

Why is it important for security policies to be communicated and regularly reviewed?

• To confuse employees with changing rules

• To ensure that employees are aware of security practices and updates

• To comply with regulations only

• To increase the complexity of the policy

In the context of security policies, what does the principle of least privilege refer to?

• Allowing every employee access to all resources

• Providing unlimited privileges to top-level executives

• Restricting access to the security policy itself

• Granting individuals only the access they need to perform their duties

What is the primary purpose of security procedures in an organization?

• To outline step-by-step guidelines for implementing security measures

• To create unnecessary bureaucratic processes

• To define strategic business goals

• To increase network speed

Why is it important to regularly review and update security procedures?

• To maintain a static and unchanging security posture

• To confuse employees with frequent changes

• To minimize communication with employees

• To adapt to evolving security threats and technologies

How does the principle of "least privilege" apply to file and folder permissions?

• It suggests giving users unlimited access to all files and folders
  

• It requires encrypting all files and folders regardless of sensitivity

• It advocates granting individuals the minimum permissions necessary to perform their job functions

• It encourages users to set their own permissions

  
  

In the context of file permissions, what does the term "read" privilege allow a user to do?

• Modify and delete files

• View the contents of a file

• Change file ownership

• Execute executable files

What is the primary purpose of a symmetric encryption algorithm?

• To secure communication between two parties using a shared key

• To generate hash values for data integrity

• To authenticate users in a network

• To create digital signatures

What is the primary purpose of a public key in asymmetric cryptography?

• To encrypt data for secure transmission

• To decrypt data for secure storage

• To validate the authenticity of digital signatures

• To generate random session keys