JEYAPRIYA

Which of the following is an example of a technical control in cybersecurity?

• Security awareness training

• Firewall implementation

• Acceptable use policy

• Background checks for employees

What is the CIA triad in cybersecurity?

• Central Intelligence Agency triad

• Confidentiality, Integrity, and Authentication

• Confidentiality, Integrity, and Availability

• Cryptography, Investigation, and Authorization

What type of attack involves sending emails that appear to be from trusted sources to steal sensitive information?

• Man-in-the-middle attack

• Denial of Service attack

• Phishing attack

• Brute force attack

Which cybersecurity principle refers to giving users only the access privileges they need to perform their jobs?

• Least privilege

• Zero trust

• Risk management

• Defense in depth

What is the primary purpose of encryption in cybersecurity?

• To prevent unauthorized system access

• To make data unreadable to unauthorized users

• To increase network speed

• To detect malware

What does the term "Defense in Depth" refer to in cybersecurity?

• Having multiple layers of security controls

• The depth of encryption algorithms

• The number of firewalls in a network

• The physical security of a data center

Which of the following is an example of a social engineering attack?

• SQL injection

• Cross-site scripting

• Pretexting

• Buffer overflow

What is a vulnerability in the context of cybersecurity?

• A person who attacks computer systems

• A weakness that can be exploited by threats

• Software used to protect systems

• A mathematical algorithm for encryption

Which of the following is NOT typically considered one of the five functions of the NIST Cybersecurity Framework?

• Identify

• protect

• acceleratace

• recover

What is the purpose of a DMZ (Demilitarized Zone) in network security?

• To physically secure network equipment

• To create a buffer zone between the internet and internal network

• To encrypt all network traffic

• To train security personnel