T1: Today's Security Professional ACS

Which part of the CIA triad ensures that data is accessible when needed?

• Confidentiality

• Integrity

• Availability

• Authentication

A hospital encrypts patient files to prevent unauthorized viewing. Which CIA principle is most directly protected?

• Integrity

• Confidentiality

• Availability

• Nonrepudiation

A disgruntled employee alters financial records without permission. Which CIA element has been violated?

• Confidentiality

• Integrity

• Availability

• Nonrepudiation

The DAD triad element Disclosure most closely threatens which CIA principle?

• Integrity

• Availability

• Confidentiality

• Nonrepudiation

Which example best demonstrates Nonrepudiation?

• A user’s encrypted hard drive is protected from theft.

• An attacker floods a server with requests.

• A digital signature proves the sender cannot deny authorship.

• A firewall blocks malicious traffic.

Which type of risk occurs when a breach damages customer trust and brand value?

• Financial risk

• Operational risk

• Strategic risk

• Reputational risk

A company fined for failing to follow HIPAA requirements has experienced what risk?

• Compliance risk

• Strategic risk

• Operational risk

• Reputational risk

Identity theft after a data breach typically results from:

• Unauthorized data alteration

• Unauthorized data disclosure

• Denial of services

• System availability loss

Firewalls and encryption are examples of which category of security controls?

• Managerial

• Operational

• Physical

• Technical

Security policies and risk assessments fall under which control category?

• Managerial

• Operational

• Physical

• Technical