Information Security Governance Quiz

What is a key reason for proper management of usernames and passwords?

• To simplify account creation

• To enhance user experience

• To reduce system performance

• To safeguard access to information systems

Which of the following is a best practice for password management?

• Using the same password for all accounts

• Enforcing password complexity

• Allowing users to share passwords

• Storing passwords in plain text

What does Multi-Factor Authentication (MFA) require?

• Two or more independent forms of authentication

• A single security question

• Only a password

• A username and password only

Why is it important to have unique usernames?

• To allow account sharing

• To reduce the number of accounts

• To ensure accountability and traceability

• To simplify login processes

What is the principle of least privilege?

• Users should have maximum access

• Users should share their accounts

• Users should have the minimum level of access required

• Users should have access to all files

What is the purpose of data encryption?

• To make data readable by everyone

• To reduce data storage requirements

• To protect sensitive data from unauthorized access

• To speed up data processing

Which type of encryption uses the same key for both encryption and decryption?

• Asymmetric encryption

• Symmetric encryption

• Hashing

• Tokenization

What is a security token?

• A network protocol

• A type of password

• A physical or wireless device for authentication

• A software application

What is the purpose of auditing permissions?

• To simplify user management

• To enhance system performance

• To detect misconfigurations or excessive permissions

• To increase user access

What does decryption do?

• Stores data securely

• Generates encryption keys

• Encrypts data for security

• Converts ciphertext into readable plaintext