CIA Triad and Information Security Quiz

What does the CIA triad stand for in information security?

• Confidentiality, Information, Accuracy

• Control, Integrity, Access

• Confidentiality, Information, Access

• Confidentiality, Integrity, Availability

Which of the following is a method to prevent snooping?

• Using default configurations

• Ignoring social engineering

• Installing privacy screens

• Disabling encryption

What is pretexting in the context of social engineering?

• Gaining trust by pretending to be from a trusted entity

• Intercepting digital communications

• Unauthorized access to data

• Using malware to capture login information

What does PII stand for?

• Public Information Identifier

• Private Information Index

• Personally Identifiable Information

• Personal Information Integrity

What is a man-in-the-middle attack?

• An attack where the attacker relays and possibly alters communications between two parties

• An attack where data is destroyed by malware

• An attack where a network is flooded with data packets

• An attack where a valid data transmission is repeated or delayed

How can replay attacks be prevented?

• Using default configurations

• Implementing SSL or TLS

• Disabling encryption

• Ignoring session tokens

What is the primary cause of hardware failure?

• Ignoring social engineering

• Encrypting data

• Using strong passwords

• Overheating

What is a DDoS attack?

• A network attack from multiple computers that shuts down a connection

• A method to prevent data loss

• A single computer shutting down a connection

• An email carrying a virus

What is spear phishing?

• Unauthorized access to data

• A targeted attempt to obtain sensitive information from a specific individual

• A broad attempt to obtain sensitive information

• Intercepting digital communications

What are the best ways to protect the confidentiality, integrity, and availability of data?

• Employ antisocial engineering techniques

• Develop and implement strong password policies

• Implement clean disk and recycling policies

• Employ encryption techniques and educate users