Fundamental Security Concepts Quiz

What does the term 'Confidentiality' refer to in information security?

• Information is accessible to those authorized to view or modify it

• Information should only be read by authorized persons

• Data is stored and transferred as intended and any modification is authorized

• Persons cannot deny creating or modifying data

Which of the following is a category of security control types that relies on a person for implementation?

• Managerial

• Operational

• Technical

• Physical

What is the responsibility of a Chief Information Officer (CIO) in information security roles and responsibilities?

• Technical

• Managerial

• Non-technical

• Overall responsibility

Which of the following is a functional type of security control that operates before an attack to physically or logically restrict unauthorized access?

• Corrective

• Detective

• Preventive

• Directive

What is the purpose of a Compensating security control functional type?

• Identifies attempted or successful intrusions

• Enforces a rule of behavior

• Psychologically discourages intrusions

• Substitutes for a principal control

What is a key competency in information security roles?

• Risk assessments and testing

• Incident response and reporting

• Business continuity and disaster recovery

• Access control and user privileges

Which business unit is responsible for incident response in information security?

• Security Operations Center (SOC)

• Cyber incident response team (CIRT)

• DevSecOps

• Development, security, and operations

What type of security control category involves devices that mediate access to premises and hardware?

• Physical

• Technical

• Operational

• Managerial