Cybersecurity Principles

What principle involves restricting access to only necessary information?

• Least Privilege
• Need to Know
• Confidentiality
• Integrity
• Availability

What does the principle of "defense in depth" refer to?

• Multiple security layers
• Single security measure
• Encryption only
• Regular updates
• Password complexity

What is the principle of "separation of duties"?

• Combining roles for efficiency
• Sharing passwords
• Assigning different tasks to different people
• Using a single system for all tasks
• Centralizing access control

What is the purpose of security policies in an organization?

• Define user behavior
• Encrypt data
• Backup data
• Monitor network traffic
• Manage hardware

What principle ensures that only authorized users have access to certain data?

• Authentication
• Authorization
• Auditing
• Integrity
• Non-repudiation

What principle is focused on keeping data consistent and accurate?

• Confidentiality
• Integrity
• Availability
• Authentication
• Authorization

What does "security through obscurity" refer to?

• Hiding security measures
• Using complex passwords
• Encrypting data
• Regularly updating systems
• Implementing strong firewall rules

What is the goal of regular security patch management?

• Fixing vulnerabilities
• Improving performance
• Increasing user access
• Reducing costs
• Backup data

What does the principle of "least privilege" mean?

• Users have maximum permissions
• Users have the least necessary permissions
• Users can access all systems
• Users have unrestricted access
• Users share access rights

What is the purpose of data encryption?

• To hide data from unauthorized access
• To speed up data transmission
• To increase data storage capacity
• To manage network traffic
• To authenticate users