Security Principles and Controls Quiz

You have excellent technical acumen. Part of your responsibilities where you work include overlooking daily operations as well as analyzing and designing security solutions in a specific area. You encounter a situation that needs to be escalated. Which of the following are you most likely to approach with the situation?

• CIO

• CISO

• Security manager

• Security administrator

When analyzing a security breach, Acer determines the attacker was able to change the price of an item from $200 to $20. What security protection was compromised?

• Confidentiality

• Integrity

• Authorization

• Authentication

A visitor is trying to access a military base. The visitor needs to supply their license and enter other personal information via a kiosk. The visitor is eventually allowed to enter the base but is limited to certain areas only. What security principles are being employed? Select two.

• Authentication

• Authorization

• Confidentiality

• Accounting

• Availability

Which of the following best describes what Della could do to prevent unauthorized parties from viewing sensitive customer information at her retail store?

• Use software to encrypt data in a secure database.

• Verify the ID of the party requesting access to the data.

• Limit access to certain areas once access is granted.

• Ensure the data cannot be manipulated or changed.

Evin thinks one of the computer systems where he works may have been compromised. He does not currently have a good way of determining if an unauthorized user logged in successfully. Which of the following can Evin implement that will, going forward, help him identify who logs in?

• Authentication

• Authorization

• Availability

• Accounting

A friend gets a virus and asks if you can help them fix the problem. You boot the computer with a bootable flash drive containing security-related tools and remove the virus. What type of control did you employ?

• Deterrent

• Corrective

• Directive

• Compensating

As a consultant, you are asked by a company to help them work on a security-related project that falls under the operational control scope. Which of the following will you help implement?

• Define an acceptable use policy

• Install a card reader to access the data center

• Install hardware to block malicious content

• Implement security awareness training

Which of the following best describes the differences or similarities between cybersecurity and information security? Select three.

• Cybersecurity primarily protects devices.

• Information security falls under the cybersecurity umbrella.

• Cybersecurity guarantees more safety than information security.

• Information security protects using products, people, and procedures.

• Cybersecurity induces a lot more inconvenience than information security.

What type of entity would a threat actor most likely attack to steal design documents for a relatively recently announced government-issued contract to design and build a missile defense system?

• Individual

• Government

• Enterprise

• For-profit organization

An attacker hacks into a cell phone with the intent of stealing credit card information. The attacker also tries to extend the nefarious activity to contacts in the victim's phone, and their contacts as well. What entity was the attacker targeting?

• An enterprise

• A competitor

• An individual

• A government agency