CISM Certification Domain 1: Information Security Governance Video Boot Camp 2019 - The CIA triad

The video tutorial covers the CIA Triad—Confidentiality, Integrity, and Availability—and its significance in IT security. It explains data states, encryption methods, and the importance of defense in depth. The tutorial also discusses threats like social engineering and strategies to mitigate them, emphasizing the need for a balanced approach to the CIA Triad to ensure effective IT security.

What is the primary goal of the CIA Triad in IT security?

• To prioritize data integrity over other aspects

• To ensure data is always available

• To balance confidentiality, integrity, and availability

• To focus solely on data confidentiality

Which state of data is described as being 'just sitting on a disk somewhere'?

• Data in transit

• Data at rest

• Data in use

• Data in motion

What is a clean desk policy designed to prevent?

• Software bugs

• Unauthorized access to printed data

• Data encryption failures

• Network intrusions

Which of the following is a common threat to data confidentiality?

• Data redundancy

• Social engineering

• Data encryption

• Data hashing

What is the purpose of defense in depth?

• To provide a single layer of security

• To use multiple overlapping layers of defense

• To ensure data is always encrypted

• To focus on physical security only

How can the Internet of Things pose a threat to IT security?

• By simplifying network configurations

• By enhancing encryption methods

• By providing new attack vectors

• By increasing data redundancy

What is a key strategy to ensure data availability?

• Applying strict access controls

• Focusing on data confidentiality

• Using redundant systems

• Implementing strong encryption

Why is patch management crucial for maintaining availability?

• It prevents unauthorized data access

• It ensures data integrity

• It addresses known vulnerabilities

• It enhances data encryption

What role do IT security professionals play in advising senior management?

• They make all security decisions

• They provide technical support

• They advise on security measures and risks

• They focus on software development

What is the opposite of the CIA Triad?

• Encryption, hashing, and redundancy

• Access control, authentication, and authorization

• Disclosure, alteration, and destruction

• Confidentiality, integrity, and availability