Security Quiz Chapter 12

What are the three elements of data that need to be ensured for effective protection, collectively known as "CIA"?

• Confidentiality, Integrity, Authorization

• Confidentiality, Identity, Availability

• Confidentiality, Integrity, Availability

• Confidentiality, Integration, Access

Which two mechanisms are commonly used for enforcing data confidentiality?

• Encryption and Access Control Lists (ACLs)

• Hashing and Logging

• Usernames and Passwords

• Firewalls and Antivirus Software

What is the primary goal of cryptographic hashing and logging in terms of data security?

• To validate the integrity of data

• To ensure data availability

• To encrypt data

• To control user access

What is the first step in protecting your AWS credentials according to the text?

• To manage services and edit resources

• To protect them from accidental exposure and unauthorized use

• To ensure that users have only the permissions they need

• To log into the AWS management console

What is the second step to ensure when managing AWS credentials?

• To give users more permissions than they need

• To ensure that users have only the permissions they need, and no more

• To frequently change user permissions

• To monitor user activity continuously

What is a principal in AWS IAM terminology?

• A set of credentials used to authenticate with AWS resources

• A password policy

• An entity that can take an action on an AWS resource

• A multi-factor authentication device

Which of the following is recommended to secure the root user in AWS?

• Enabling a password policy for all IAM users

• Creating an IAM user and attaching the AdministratorAccess policy

• Using the root user for routine administrative tasks

• Requiring an administrator to reset an expired password

What is the minimum password length that you can set for IAM users in AWS?

• Four characters

• Six characters

• Eight characters

• Ten characters

What is the principle of least privilege in information security?

• Giving IAM principals permissions to all resources

• Assigning an MFA token to every user

• Giving IAM principals permissions to only the resources they need and no more

• Enforcing a password policy to all IAM users

By default, what permissions do IAM principals have when they are created?

• Full access to AWS resources

• No permissions

• Read-only permissions

• Limited permissions based on common job roles