Nguyên lý an toàn thông tin

What is the primary goal of security in the context of information
systems?

• Enhancing system speed

• Maximizing resource utilization

• Ensuring confidentiality, integrity, Non-repudiation and availability

• Minimizing software complexity

What does the term "confidentiality" mean in the context of
security?

• nsuring data is accurate and unaltered
  

• Protecting data from unauthorized access
  

• Maximizing system performance
  

• Preventing data loss during hardware failures
  

Which of the following is an example of a security measure to ensure
"integrity"?

• Firewalls
  

• Antivirus software
  

• Data encryption
  

• Digital signatures

What is the primary goal of a "Denial of Service" (DoS) attack?

• Unauthorized access to sensitive data
  

• Altering data without detection

• Disrupting or degrading system availability
  

• Bypassing firewalls
  

Which type of attack involves tricking individuals into divulging
sensitive information, such as passwords or credit card numbers?

• Denial of Service (DoS)
  

• . Spoofing
  

• Phishing
  

• . Man-in-the-Middle (MitM)
  

What is the purpose of a "Brute Force" attack in information
security?

• Gaining unauthorized access by exploiting system vulnerabilities
  

• Decrypting encrypted data through trial and error
  

• Disrupting network communication
  

• . Infecting systems with malicious software
  

Which of the following is a characteristic of a "Zero-Day" exploit?

• a. It targets previously unknown vulnerabilities
  

• b. It relies on social engineering techniques
  

• c. It only affects outdated software
  

• d. It requires physical access to the target system
  

What is the main goal of a "Man-in-the-Middle" (MitM) attack?

• Disrupting network communication
  

• Intercepting and possibly altering communication between two
  parties
  

• Crashing a system by overwhelming it with traffic
  

• Exploiting software vulnerabilities to gain unauthorized access
  

What is the first step in the risk management process?

• a. Risk assessment

• Risk identification
  

• Risk mitigation
  

• Risk monitoring
  

What does the term “risk mitigation” involve in risk management?

• . Accepting the risk without taking any action
  

• Reducing the impact or likelihood of a risk
  

• Transferring the risk to a third party
  

• Ignoring the risk altogether