Which of the following is NOT one of the three main goals of computer security as remembered by the CIA triad?

• Confidentiality

• Compliance

• Integrity

• Availability

What term describes a weakness in a system-like an unlocked door-that could let someone cause harm, whether by accident or on purpose?

• Threat

• Risk

• Vulnerability

• Exploit

What is the chance that someone or something might take advantage of that weakness to cause damage?

• Vulnerability

• Threat

• Risk

• Attack Vector

The person or thing causing the threat is called a/an:

• Attack vector

• Vulnerability actor

• Risk agent

• Threat actor

What is the process of spotting possible problems (like weaknesses or threats), figuring out how serious they are, and deciding how to deal with them?

• Security Audit

• Posture Assessment

• Process Assessment

• Risk Management

Improving a system's security is called:

• Hardening

• Compliance

• Assessment

• Auditing

Which of the following is any data that can identify a person-like their name, ID number, phone number, or address?

• Confidential Information

• Personal Information

• Sensitive Data

• Personally Identifiable Information (PII)

The General Data Protection Regulation (GDPR) is a privacy law from which region?

• United States

• European Union

• Asia

• Australia

What is the term for protecting data by making sure only the right people or systems can read it?

• Access Control

• Encryption

• Hashing

• Logical Security

Which type of algorithm changes readable text (called plaintext) into unreadable code (called ciphertext), requiring a special key to change it back?

• Hash algorithm

• Encryption algorithm

• Decoding algorithm

• Compression algorithm