chapter 1&2

What is the primary purpose of authentication in information security?

• To determine the resources a user is allowed to access

• To verify the identity of a user or device

• To ensure data is encrypted during transmission

• To log user activities on a network

Which of the following is an example of the "something you know" factor of authentication?

• A smart card

• A fingerprint

• A password

• A security token

Which method of authentication relies on physical characteristics of a person?

• Password authentication

• Two-factor authentication

• Biometric authentication

• Token-based authentication

Which of the following best describes the concept of multi-factor authentication (MFA)?I’

• Using multiple devices to access a system

• Combining two or more authentication factors to verify identity

• Encrypting data using multiple algorithms

• Logging in using a single sign-on system

What is the main difference between identification and authentication?

• Identification verifies user credentials, while authentication grants access to resources

• Identification ensures data integrity, while authentication verifies user identity

• Identification is about claiming an identity, while authentication is about verifying that claim

• Identification encrypts data, while authentication decrypts it

Which of the following is a key component of information security?

• Ensuring that software updates are optional

• Protecting information confidentiality, integrity, and availability

• Allowing unrestricted access to all network resources

• Focusing solely on physical security measures

What does the term "confidentiality" mean in the context of information security?

• Ensuring that information is accurate and unaltered

• Making sure that information is available when needed

• Protecting information from unauthorized access

• Encrypting all data stored in the cloud

What does the term "integrity" refer to in information security?

• The ability to recover data from backups

• Ensuring that data is accurate and has not been altered or tampered with

• Providing timely access to information

• Protecting data from unauthorized access

Which concept ensures that information and resources are available to authorized users when needed

• Confidentiality

• Integrity

• Availability

• Authentication