Fundamentals of Data Security

What is the primary need for data security?

• To enhance data processing speed.

• To protect sensitive information from unauthorized access and breaches.

• To reduce the cost of data storage.

• To ensure data is easily accessible to everyone.

Define the term 'threat' in the context of data security.

• A threat is a security measure to protect data.

• A threat is an actual breach that has already occurred.

• A threat is a potential danger that could exploit a vulnerability in a data security system.

• A threat is a guaranteed attack on a data security system.

What are common types of attacks that can compromise data security?

• Data encryption

• Phishing, malware, ransomware, denial-of-service (DoS), man-in-the-middle (MitM), SQL injection.

• Firewall bypass

• Password strength analysis

Explain the importance of security policies in an organization.

• Security policies are primarily for IT departments only.

• Security policies can be ignored if employees are trustworthy.

• Security policies are crucial for protecting information assets, ensuring compliance, and promoting a culture of security within an organization.

• Security policies are only necessary for large organizations.

What is a cookie policy and why is it important?

• A cookie policy is a document that details the nutritional value of cookies.

• A cookie policy is a guideline for baking cookies.

• A cookie policy is a type of dessert recipe.

• A cookie policy is a document that explains how a website uses cookies and is important for transparency and legal compliance.

Describe the concepts of confidentiality, integrity, and availability.

• Confidentiality, Integrity, and Availability (CIA) are fundamental principles of information security.

• Confidentiality refers to data being publicly accessible.

• Availability means that data is stored in a physical location.

• Integrity ensures that data is always deleted after use.

How does layering contribute to data security?

• Layering reduces the need for encryption.

• Layering eliminates the risk of data breaches.

• Layering simplifies data access for users.

• Layering contributes to data security by providing multiple barriers against unauthorized access.

What is abstraction in the context of data security?

• Abstraction in data security is the practice of hiding complex data management details and exposing only essential features to enhance security and reduce complexity.

• Abstraction refers to the process of creating multiple copies of data for redundancy.

• Abstraction in data security involves encrypting all data without exception.

• Abstraction is the method of directly exposing all data management details to users.

Define data hiding and its significance in security.

• Data hiding is irrelevant to security measures.

• Data hiding is a method for increasing data visibility.

• Data hiding allows unrestricted access to an object's internal state.

• Data hiding is a principle that restricts access to an object's internal state, enhancing security by protecting sensitive information.

What are security controls and why are they necessary?

• Security controls are protective measures for information systems, necessary to safeguard data and mitigate risks.

• Security controls are optional measures that can be ignored.

• Security controls are solely for compliance with regulations.

• Security controls are only necessary for physical security.