Information Assurance and Security 2- Prelim

Which of the following best represents the three main goals of information security?

• Confidentiality, Integrity, Availability

• Protection, Encryption, Authentication

• Prevention, Detection, Recovery

• Hardware, Software, Network

What does “integrity” in the CIA triad primarily ensure?

• Data is protected from unauthorized access

• Data is accurate and has not been tampered with

• Data is available when needed

• Data is encrypted during transmission

Which of the following is an example of ensuring confidentiality?

• Using encryption to protect sensitive files

• Backing up critical business data

• Implementing redundancy in servers

• Monitoring system logs

Which threat directly affects availability?

• SQL Injection

• Denial-of-Service Attack

• Phishing Email

• Weak Passwords

Business continuity planning is primarily designed to ensure:

• Recovery after a disruption

• Prevention of all cyberattacks

• Enforcement of confidentiality

• Replacement of firewalls

In the Secure Development Lifecycle (SDLC), which phase involves testing applications for vulnerabilities?

• Planning

• Design

• Implementation

• Testing

Which OWASP Top 10 vulnerability is exploited when user inputs are not sanitized, allowing attackers to run scripts in a victim’s browser?

• Injection

• Broken Authentication

• Cross-Site Scripting (XSS)

• Sensitive Data Exposure

What is the best method to prevent SQL Injection attacks?

• Disabling error messages

• Encrypting the database

• Using parameterized queries

• Increasing server memory

Which of the following is considered a secure coding practice?

• Hardcoding passwords into applications

• Validating all user input

• Relying only on client-side validation

• Allowing unrestricted file uploads

What does OWASP stand for?

• Online Web Application Security Project

• Open Web Application Security Project

• Organization for Web Application Secure Programming

• Official Web Access Security Program