IAS 2 Security Architecture and Design Quiz 3

What does the principle of "least privilege" imply?

• A. Users should have access to all resources  

• B. Users should have the minimum access necessary to perform their job functions

• C. Security should be implemented through hidden mechanisms

• D. Security should be based on the user's rank

What is a security policy?

• A. A set of guidelines for aesthetic design         

• B. A document outlining the rules and procedures for protecting assets

• C. A software tool for managing security

• D. A list of all users and their permissions

In the context of security design, what does CIA stand for?

• A. Confidentiality, Integrity, Availability                             

• B. Central Intelligence Agency

• C. Confidentiality, Information, Authentication              

• D. Control, Integrity, Access

What is the purpose of a demilitarized zone (DMZ) in network security?

• A. To store backup data                                                        

•    B. To host internal company resources

• C. To provide an additional layer of security for external-facing services

• D. To monitor employee activities

What is a firewall?

• A. A physical barrier to prevent unauthorized entry

• B. A system designed to prevent unauthorized access to or from a private network

• C. A software for managing user credentials

• D. An encryption technique

Which of the following best describes a "honeypot"?

• A. A security mechanism that records all network traffic

• B. A system designed to attract and trap potential attackers

• C. A database of known security threats

• D. A method for securing wireless networks

What does the term "asymmetric cryptography" refer to?

• A. Cryptography using the same key for encryption and decryption

   

• B. Cryptography using different keys for encryption and decryption

• C. Cryptography without any keys

• D. Cryptography using hash functions

What is the purpose of a hash function in cryptography?

• A. To encrypt data                        

• B. To compress data

• C. To generate a unique fixed-size output from variable-size input data

• D. To create encryption keys

What does the term "public key" refer to in asymmetric cryptography?

• A. A key used only for decryption                          

• B. A key that is kept secret and never shared

• C. A key that is shared publicly and used for encryption

• D. A key used for both encryption and decryption

What is the primary goal of physical security?

• A. To prevent unauthorized access to physical resources

• B. To encrypt sensitive data      

• C. To monitor network traffic

• D. To backup data regularly