Week 1 IS-IA Quiz 1

What is the term for the principle that ensures authorized users can access and use information and systems when needed?

• Confidentiality

• Integrity

• Availability

• Non-repudiation

Which of the following best describes the "Security Mindset"?

• Reacting to security threats after they occur.

• A proactive and critical way of thinking in cybersecurity.

• Focusing solely on physical security measures.

• Minimizing risk assessment in security planning.

Information Security (IS) is defined as the protection of information from unauthorized access or alterations. Which of the following is it a subset of IS?

• Cybersecurity

• Information Assurance (IA)

• Physical Security

• Data Privacy

How does a proactive security model differ from a reactive security model?

• Reactive models focus on prevention, while proactive models focus on response.

• Proactive models take preventative measures, while reactive models respond after detection.

• Reactive models are more common in the digital era, while proactive models are traditional.

• Proactive models only consider physical threats, reactive models only digital.

A company implements strong encryption for all its sensitive customer data. Which principle of Information Assurance is primarily being addressed by this measure?

• Availability

• Integrity

• Authentication

• Confidentiality

A university's student grading system is designed to prevent any unauthorized changes to grades once they are officially submitted. This aligns with which core principle of Information Assurance?

• Availability

• Confidentiality

• Integrity

• Authentication

During a security audit, an IT professional critically examines a new system's architecture, looking for potential weaknesses that even advanced attackers might exploit, rather than just known vulnerabilities. This approach best exemplifies which concept?

• Reactive Security

• Reasoned Paranoia

• Risk Overreaction

• Compliance Auditing

An organization experiences a data breach where an unpatched software vulnerability was exploited, similar to the Equifax hack. To prevent future incidents of this nature, what lesson from major breaches is most relevant for the organization to implement?

• Focusing solely on physical guards.

• Reducing third-party vendor relationships.

• Ensuring regular software updates and patches.

• Minimizing user education on security policies.

A small business is considering a new cloud-based customer relationship management (CRM) system. When applying a security mindset, what question would be most critical to ask regarding this new system?

• What is the monthly subscription cost of the CRM?

• What could go wrong if this CRM system were compromised?

• How many employees will need access to the CRM?

• Does the CRM have a user-friendly interface?

Following a detected but contained phishing attempt on employee credentials, an organization decides to review and strengthen its email security protocols and implement mandatory security awareness training. This response demonstrates a shift towards what type of security model?

• Early Security

• Reactive

• Proactive

• Traditional