Information Assurance & Security Practice Questions

What are the three components of the CIA triad?

• Control, Integrity, Assurance

• Confidentiality, Integrity, Availability

• Cybersecurity, Information, Access

• • Compliance, Identification, Authorization

Which of the following security principles states that users should only have the minimum permissions necessary to perform their tasks?

• Least Privilege

• Defense in Depth

• Fail-Safe Defaults

• Separation of Duties

The Bell-LaPadula security model enforces which type of security control?

• Integrity

• Confidentiality

• Availability

• Nonrepudiation

In the Biba Integrity Model, the “No Write Up” policy ensures:

• Lower integrity levels cannot modify higher integrity levels.

• Users can only modify data at their security level.

• Users cannot write data to any system.

• Data can be accessed freely across security levels.

What is the primary purpose of a mantrap in physical security?

• To prevent tailgating into secure areas

• To trap intruders permanently

• To reinforce network security

• To eliminate security guards

Which fire suppression system is most appropriate for protecting sensitive computer equipment?

• Water-based sprinkler system

• Halon-based system

• Clean-agent system (FM-200, Inergen)

• Carbon dioxide extinguisher

What is the primary security risk associated with USB flash drives?

• They are too expensive for general use.

• They can be used to easily bypass security controls.

• They can be used to easily bypass security controls.

• They require special drivers to function.

Which type of access control system is considered “something you have”?

• Biometrics

• Passwords

• Smart Cards

• Security Questions

What is the primary goal of an Acceptable Use Policy (AUP)?

• To outline how employees should use company resources

• To prevent employees from using personal devices

• To set password expiration policies

• To establish financial policies for the company

Which security principle ensures that no single person has complete control over a critical process?

• Least Privilege

• Separation of Duties

• Zero Trust

• • Need to Know