67 Question Sec+ Quiz

Which of the following best describes the CIA Triad?

• Confidentiality, Integrity, Authentication

• Confidentiality, Integrity, Availability

• Control, Integrity, Availability

• Compliance, Integrity, Authentication

Answer explanation

The CIA Triad stands for Confidentiality, Integrity, and Availability. These three principles are essential for ensuring the security and reliability of information systems, making this the correct choice.

What is the primary function of a firewall?

• Encrypting sensitive data

• Blocking unauthorized access while permitting legitimate communication

• Detecting and removing malware

• Managing user authentication

Answer explanation

The primary function of a firewall is to block unauthorized access while permitting legitimate communication, ensuring network security by controlling incoming and outgoing traffic.

Which attack involves an attacker intercepting and modifying communications between two parties?

• Man-in-the-Middle (MitM)

• Phishing

• Denial-of-Service (DoS)

• SQL Injection

Answer explanation

The Man-in-the-Middle (MitM) attack occurs when an attacker secretly intercepts and alters the communication between two parties, making it the correct choice. Other options like phishing, DoS, and SQL injection do not involve this type of interception.

What is the purpose of multi-factor authentication (MFA)?

• To require users to answer multiple security questions

• To ensure users reset their passwords regularly

• To provide an additional layer of security by requiring two or more authentication factors

• To replace password-based authentication

Answer explanation

The correct choice highlights that multi-factor authentication (MFA) adds an extra layer of security by requiring two or more authentication factors, making it harder for unauthorized users to gain access.

Which of the following is an example of a physical security control?

• Antivirus software

• Firewall

• Security badge access

• Password policy

Answer explanation

Security badge access is a physical security control that restricts access to facilities. In contrast, antivirus software, firewalls, and password policies are examples of logical security controls.

What type of malware disguises itself as legitimate software to trick users into installing it?

• Worm

• Trojan Horse

• Rootkit

• Ransomware

Answer explanation

A Trojan Horse is a type of malware that pretends to be legitimate software, tricking users into installing it. Unlike worms or ransomware, it relies on user action to spread and execute.

Which security measure is commonly used to prevent brute-force attacks?

• Account lockout policy

• Antivirus software

• Content filtering

• Network segmentation

Answer explanation

An account lockout policy is designed to prevent brute-force attacks by temporarily locking accounts after a certain number of failed login attempts, thereby thwarting unauthorized access attempts.

What is the main function of a VPN (Virtual Private Network)?

• To detect network intrusions

• To provide secure remote access by encrypting data transmission

• To prevent unauthorized access to files

• To replace traditional firewalls

Answer explanation

The main function of a VPN is to provide secure remote access by encrypting data transmission, ensuring privacy and security while accessing the internet or private networks.

What does the principle of least privilege (PoLP) state?

• Users should have access to all resources on a system

• Users should only have the minimum access necessary to perform their job functions

• Users must change their passwords every 30 days

• Users should be granted administrator rights by default

Answer explanation

The principle of least privilege (PoLP) states that users should only have the minimum access necessary to perform their job functions, ensuring security and reducing the risk of unauthorized access.

What is the primary purpose of an Intrusion Detection System (IDS)?

• To actively block unauthorized access attempts

• To detect and alert on suspicious activity

• To replace firewalls in network security

• To encrypt network traffic

Answer explanation

The primary purpose of an Intrusion Detection System (IDS) is to detect and alert on suspicious activity within a network, rather than actively blocking access or replacing firewalls.