Security

What does the CIA triad stand for in information security?

• Confidentiality, Integrity, Authorization

• Confidentiality, Integrity, Availability

• Confidentiality, Information, Authentication

• Confidentiality, Integrity, Authentication

What is the principle of "defense in depth"?

• Using encryption to protect data

• Layering multiple security measures to protect assets

• Ensuring only authorized users access data
  

• Automating security tasks for efficiency
  

Which of the following ensures data accuracy and completeness over its lifecycle?

• Availability

• Non-repudiation

• Integrity

• Confidentiality

What is the primary goal of availability in IT security?

• Ensuring data is accessible only to authorized users

• Preventing denial-of-service (DoS) attacks

• Making systems and data accessible when needed

• Monitoring network activity

Which of the following is an example of ensuring confidentiality?

• Two-factor authentication

• RAID configurations

• Load balancing

• Backup and restoration

What is an IT threat?

• A tool used for encryption

• A mechanism for protecting data

• A vulnerability in the system

• An event that could exploit a vulnerability

What is an example of a naturally occurring IT risk?

• Hardware failure
  

• Identity theft
  

• Phishing attack

• Virus infection

Which type of attack involves altering data without authorization?

• Passive attack

• Active attack

• Denial of Service (DoS)

• Social engineering

Which of the following best describes a Distributed Denial of Service (DDoS) attack?

• A single source flooding the system with traffic

• Multiple sources overwhelming the target system

• Unauthorized data access by an individual hacker

• Automated scanning for vulnerabilities