ITF+ 6.1 to 6.4 Security Concepts

What does the "C" in the CIA triad stand for in the context of information security?

• Control

• Confidentiality

• Compliance

• Configuration

Which of the following best describes the concept of integrity in information security?

• Ensuring data is accessible to authorized users

• Protecting data from unauthorized access

• Ensuring data is accurate and unaltered

• Verifying user identities

What is the primary goal of availability in the context of the CIA triad?

• To ensure data is only accessible to authorized users

• To ensure data is accurate and reliable

• To ensure data is available when needed

• To ensure data is encrypted

Which of the following is a best practice for securing devices?

• Using default passwords

• Regularly updating software

• Disabling firewalls

• Sharing passwords

What is the purpose of authentication in security?

• To encrypt data

• To verify the identity of a user

• To ensure data integrity

• To provide access to all users

Which of the following is an example of a behavioral security concept?

• Password complexity

• User training and awareness

• Data encryption

• Firewall configuration

What does nonrepudiation ensure in a security context?

• Data cannot be altered

• Users cannot deny their actions

• Data is always available

• Users are authenticated

Which of the following is a method of authorization?

• Password entry

• Access control lists

• Data encryption

• User training

What is the primary function of accounting in security?

• To track user activities

• To encrypt data

• To authenticate users

• To authorize access

Which of the following is a common method for securing devices?

• Disabling antivirus software

• Using strong passwords

• Sharing login credentials

• Ignoring software updates