IT3101-IAS-PLE

An attacker modifies financial records to insert fraudulent transactions. Which triad(s) were directly violated?

• CIA – Availability only

• CIA – Confidentiality and Integrity

• CIA – Integrity only

• DAD – Denial and Disclosure

After a flood destroyed its primary data center, a company relied on its secondary backup facility to restore operations. Which CIA principle was preserved by this action?

• Confidentiality

• Integrity

• Availability

• Nonrepudiation

An organization sets up security policies requiring all employees to attend annual cybersecurity awareness training. What type of control is this?

• Technical Control

• Operational Control

• Managerial Control

• Physical Control

A company applies data masking to display only the last four digits of customer credit card numbers. What is the main objective of this technique?

• Prevent unauthorized access to entire data

• Destroy unnecessary data

• Replace sensitive values with random tokens

• Encrypt data in transmission

An attacker intercepts sensitive data being transmitted between a client and a server. Which data state was compromised?

• Data in use

• Data in transit

• Data at rest

• Data minimized

A company experiences a ransomware attack. They restore operations by using backup files. Which type of control was applied in the recovery process?

• Preventive

• Detective

• Corrective

• Directive

A power outage corrupts some stored customer files, leading to missing information in their records. This is an example of a violation of which principle?

• Confidentiality

• Integrity

• Availability

• Compliance

Which technique involves partially hiding data, such as showing only the last four digits of a credit card?

• Hashing

• Masking

• Tokenization

• Encryption

Which of the following is an operational control?

• Access control lists

• Biometric locks

• Log monitoring

• Risk assessment exercises

An organization enforces access restrictions by limiting users to login only from certain countries. What type of restriction is this?

• Permission restriction

• Role-based restriction

• Geographic restriction

• Physical restriction