ID and Access Management

What are the three principles of the CIA Triad?

• Confidentiality, Integrity, Availability

• Confidentiality, Innovation, Accessibility

• Control, Integrity, Access

• Communication, Information, Access

What is the fundamental security goal of confidentiality?

• Keeping information accurate and free of errors

• Ensuring systems operate continuously

• Keeping information and communications private

• Ensuring data remains associated with its creator

Which term refers to the security goal of ensuring data remains associated with its creator?

• Integrity

• Non-repudiation

• Availability

• Confidentiality

What does the National Institute of Standards and Technology (NIST) do?

• Develops computer security standards and publishes best practice guides

• Provides funding for cybersecurity startups

• Offers online courses in cybersecurity

• Manufactures security hardware

What is the purpose of security controls?

• To increase system speed

• To mitigate vulnerabilities and ensure CIA

• To enhance user interface design

• To reduce software costs

What is the purpose of a gap analysis?

• To measure the difference between current and desired states in a project

• To identify security vulnerabilities in a system

• To track user activity in a network

• To determine user access rights

What does identity and access management (IAM) provide?

• Data encryption and decryption

• Identification, authentication, and authorization mechanisms

• Network traffic monitoring

• System performance optimization

What is the process of identification in access control?

• Validating a user's credentials

• Issuing a user account to the correct person

• Determining user access rights

• Monitoring user activity

What is the role of authentication in security?

• To encrypt data

• To validate an entity's unique credentials

• To monitor network traffic

• To manage user permissions

What does authorization determine in access control?

• The encryption method used

• The rights and privileges a user has

• The network speed

• The type of data stored