Policies and Procedures in IT Infrastructure

What is the purpose of a clear desk policy?

• Improve employee productivity

• Reduce the risk of unauthorized access or visual hacking

• Organize workstations

• Allow quick access to files

Answer explanation

The purpose of a clear desk policy is primarily to reduce the risk of unauthorized access or visual hacking. By keeping workspaces tidy, sensitive information is less likely to be seen or accessed by unauthorized individuals.

What does data encryption at rest mean?

• Encrypting data only during network transfer

• Protecting stored data by converting it into unreadable formats

• Deleting old data from the system

• Encrypting data only when files are accessed

Answer explanation

Data encryption at rest refers to protecting stored data by converting it into unreadable formats. This ensures that even if unauthorized access occurs, the data remains secure and inaccessible without the proper decryption key.

Which of the following is an example of authentication?

• Backing up a file

• Scanning a fingerprint to unlock a device

• Encrypting a hard drive

• Monitoring network traffic

Answer explanation

Scanning a fingerprint to unlock a device is an example of authentication, as it verifies the identity of a user. The other options involve data management or security but do not confirm user identity.

What protocol ensures secure data transmission over the internet?

• HTTP

• FTP

• HTTPS

• SMTP

Answer explanation

HTTPS (HyperText Transfer Protocol Secure) ensures secure data transmission over the internet by encrypting the data exchanged between the user and the server, unlike HTTP, FTP, and SMTP which do not provide this level of security.

What tool can be used to enforce multi-factor authentication (MFA)?

• Password manager

• Authenticator app

• Antivirus software

• Network proxy

Answer explanation

An authenticator app generates time-based one-time passwords (TOTPs) for multi-factor authentication (MFA), enhancing security by requiring a second form of verification beyond just a password.

What is the primary goal of confidentiality in the CIA Triad?

• Ensuring data is available 24/7

• Restricting access to authorized users

Answer explanation

The primary goal of confidentiality in the CIA Triad is to restrict access to authorized users, ensuring that sensitive information is protected from unauthorized access.

What tool can help maintain the integrity of data?

• Firewall

• Hashing algorithms

• VPN

• RAID

Answer explanation

Hashing algorithms help maintain data integrity by generating a unique hash value for data. If the data changes, the hash value will also change, indicating potential tampering. This makes hashing essential for verifying data integrity.

Which example demonstrates availability in the CIA Triad?

• Using encryption for emails

• Implementing redundant servers to avoid downtime

• Hashing passwords

• Using firewalls to block unauthorized traffic

Answer explanation

Implementing redundant servers ensures that if one server fails, others can take over, maintaining system availability. This directly supports the availability aspect of the CIA Triad, unlike the other options which focus on confidentiality or integrity.

What is a common risk to data confidentiality?

• Data tampering

• Unauthorized access

• Network downtime

• Outdated software

Answer explanation

Unauthorized access is a primary risk to data confidentiality, as it allows individuals to view or manipulate sensitive information without permission, compromising its privacy and security.

Which practice helps ensure data availability?

• Performing regular backups

• Encrypting data at rest

• Using digital signatures

• Implementing role-based access control

Answer explanation

Performing regular backups is crucial for data availability, as it ensures that copies of data are stored securely and can be restored in case of loss or corruption. Other options focus on security rather than availability.