IIS - Practice -M2024-Fall

What does the "confidentiality" goal in information security primarily focus on?

• Preventing unauthorized access to data.

• Ensuring data is accurate and unaltered.

• Guaranteeing access to data when needed.

• Reducing the storage size of data.

Which of the following is an example of an administrative control in reducing security risks?

• Intrusion Detection Systems

• Security policies

• Door locks

• Firewalls

Identify the type of security attack used in the diagram given below:

In the context of authentication, what is "something you have"?

• A secret PIN

• A smart card

• A facial recognition system

• A password hint

Which of the following practices enhances password security?

• Writing password on sticky notes

• Using same passwords for all accounts

• Enabling Multi-Factor Authentication (MFA)

• Sharing password with friends

Brute force password cracking involves ___________ to find the correct password.

• Using a list of frequently used passwords

• Making random guesses based on user habits

• Attempting all possible character combinations one by one

• Taking advantage of software flaws to obtain passwords

What is the primary purpose of an access control system?

• To store sensitive data securely

• To manage user permissions and restrict unauthorized access

• To encrypt communication over a network

• To perform regular system backups

What does revocation of access refer to?

• Allowing a party limited access to a resource

• Granting access to a resource for a specific party

• Removing previously granted access to a resource

• Denying access from the start

To minimize the risk of CSRF and Clickjacking attacks, users should be educated to:_________________

• Avoid using social media

• Disable Anti-Virus program

• Avoid using same password

• Not click on suspicious links and report unusual behavior

Which of the following is a method used to enforce accountability in an organization?

• Regular security training sessions

• User activity logging and monitoring

• Strong password policies

• Incident response planning