02IA Quiz

What does Defense in Depth refer to?

• Securing the physical door

• Security through layers of a building

• Securing only the external perimeter

• Securing only the internal part of a building

Which of the following is part of the CIA Triangle?

• Confidentiality, Integrity, and Authorization

• Confidentiality, Integrity, and Authentication

• Confidentiality, Integrity, and Accountability

• Confidentiality, Integrity, and Availability

What is the main goal of Non-repudiation?

• Proving the legitimacy of a message or data transfer

• Ensuring data is accurate and valid

• Protecting data from unauthorized changes

• Providing undeniable evidence of authenticity and integrity

What is Authentication in the context of information security?

• Protecting data from theft and natural disasters

• Ensuring data is accessible when needed

• Tracking who touches data and when

• Verifying identification to an application or system

What are Assets in the context of information security?

• Organizational resources being protected

• Weaknesses in data confidentiality

• Probabilities of threats becoming realities

• Parameters implemented to protect data

What is a Threat in the context of information security?

• An organizational resource being protected

• The act of verifying identification

• A weakness in data confidentiality

• A possibility of data or systems being compromised

What is the main goal of Risk Response Techniques?

• Acknowledging risk without addressing it

• Transferring risk to a third party

• Avoiding risk by not engaging in the activity

• Attempting to address risk by making it less serious

What do Security Controls refer to?

• Regulations on user access levels

• Processes to limit or allow access based on roles

• Parameters implemented to protect data

• Safeguards or countermeasures used to protect data and infrastructure

What is the purpose of Administrative Network Security?

• Manage user access levels within the network

• Focus on protecting data within the network

• Prevent unauthorized personnel from accessing network components

• Implement measures to ensure only authorized individuals interact with network elements

What is Cryptology concerned with?

• Providing confidentiality, integrity, and accuracy

• Transforming information into a form that is impossible to duplicate

• Converting plaintext into cipher text

• Storing data in secure and secret form