Summarize fundamental security concepts

A hospital is storing patient records in a cloud system. Recently, there was a malware incident that altered some patient files, and some staff reported not being able to access records during a system outage.

Which elements of the CIA triad were compromised in this scenario?

• A. Confidentiality only

• B. Integrity and Availability

• C. Integrity only

• D. Availability only

Answer explanation

Integrity was compromised because the malware altered patient files. Availability was also affected due to staff being unable to access records during the outage. Confidentiality is not mentioned as breached here.

An employee sends a critical financial approval email. Later, they claim they never sent it, creating a dispute.

Which control best ensures non-repudiation in this scenario?

• A. Biometric authentication

• B. Digital signatures

• C. Strong password policies

• D. Role-based access control

Answer explanation

Digital signatures provide proof of origin and integrity of a message, ensuring the sender cannot deny sending it.

A remote worker accesses a company VPN. To enhance security, the IT team wants to ensure the person is actually who they claim to be.

Which method strengthens authentication for the user?

• A. Multi-factor authentication combining password and OTP

• B. Role-based access control

• C. Network segmentation

• D. Logging user activity

Answer explanation

Multi-factor authentication combines multiple verification factors to ensure the person is genuine, addressing the “Authenticating people” part of AAA.

A company wants to ensure that employees can only access data necessary for their roles and that access is dynamically adjusted if their responsibilities change.

Which authorization model best fits this requirement?

• A. Discretionary Access Control (DAC)

• B. Role-Based Access Control (RBAC)

• C. Mandatory Access Control (MAC)

• D. Attribute-Based Access Control (ABAC)

Answer explanation

ABAC uses attributes (user role, department, location, time) to dynamically enforce access policies, providing fine-grained, adaptive authorization.

A company implements a Zero Trust model and wants to limit access to sensitive financial systems to only verified devices and users, adapting permissions based on risk in real time.

Which components are part of the Control Plane in this Zero Trust architecture?

• A. Policy Enforcement Point (PEP) and implicit trust zones

• B. Policy Engine, Policy Administrator, adaptive identity, and threat scope reduction

• C. Honeytokens and honeypots

• D. Bollards and security guard

Answer explanation

The Control Plane defines policy and decisions: Policy Engine evaluates requests, Policy Administrator implements changes, adaptive identity ensures identity verification, and threat scope reduction limits risk exposure.

An employee attempts to access sensitive financial data from an unmanaged device. The system must enforce the access policies decided in the Control Plane.

Which component in the Data Plane is responsible for enforcing these decisions?

• A. Policy Engine

• B. Policy Enforcement Point (PEP)

• C. Policy Administrator

• D. Threat scope reduction

Answer explanation

The Policy Enforcement Point enforces the access policies on the subject/system in real time. This is the primary function of the Data Plane.

A data center wants to prevent vehicle-based intrusions, unauthorized personnel access, and monitor all entry points.

Which combination of physical controls should be implemented?

• A. Bollards, fencing, video surveillance, and access badges

• B. Honeyfile, honeytoken, and honeynet

• C. Encryption, firewalls, and MFA

• D. Policy Engine and Policy Enforcement Point

Answer explanation

Bollards prevent vehicle intrusion, fencing controls perimeter access, video surveillance monitors activity, and access badges regulate personnel entry.

A high-security warehouse wants to detect intruders in restricted areas without relying solely on cameras.

Which sensor combination is best for real-time intrusion detection?

• A. Infrared, pressure, microwave, and ultrasonic sensors

• B. Honeytoken, honeypot, honeyfile

• C. Role-based access control and logging

• D. Bollards and fencing only

Answer explanation

Infrared, pressure, microwave, and ultrasonic sensors detect motion, presence, or vibration, providing real-time alerts for intrusions beyond visual monitoring.

A financial institution wants to detect and distract attackers targeting its internal databases without exposing real data.

Which combination of deception tools is most effective?

• A. Firewall and IDS

• B. Honeyfile, honeypot, and honeytoken

• C. Policy Engine and Policy Enforcement Point

• D. Bollards, fencing, and access badges

Answer explanation

Honeyfiles, honeypots, and honeytokens create traps that attract attackers, allowing monitoring and response while protecting real assets.

A company conducts a cybersecurity assessment and identifies missing controls in its policies, technical defenses, and employee training compared to industry standards.

What is the primary purpose of this process?

• A. Implement Zero Trust immediately

• B. Conduct a gap analysis to identify deficiencies

• C. Deploy honeypots and honeytokens

• D. Strengthen physical barriers

Answer explanation

Gap analysis compares current controls against standards or best practices to identify deficiencies and prioritize remediation.