Worksheets1.1 Security Information
Total questions: 10
Worksheet time: 6mins
Name
Class
Date
1.
Which of the following are often identified as the three main goals of security? (Select three.)
a)
Integrity, Confidentiality, Assets
b)
Integrity, Availability, Confidentiality
c)
Assets, Policies, Employees
d)
Availability, Confidentiality, Employees
2.
A large multinational corporation has recently experienced a significant data breach. The breach was detected by an external cybersecurity firm, and the corporation's IT department was unable to prevent or detect the breach in its early stages.<br><br>The CEO wants to ensure that such a breach does not happen again and is considering several options to enhance the company's security posture.<br><br>Which of the following options would be the MOST effective in preventing and detecting future data breaches?
a)
Increasing the budegt for the IT department to purchase more advanced security software.
b)
Conducting regular cybersecurity training for all employees
c)
Hiring an external cybersecurity firm to conduct regular penetration testing.
d)
Implementing a dedicated Computer Incident Response Team (CIRT)
3.
A user copies files from her desktop computer to a USB flash device and puts the device into her pocket.<br><br>Which of the following security risks is MOST pressing?
a)
Non-repudiation
b)
Confidentiality
c)
Integrity
d)
Availability
4.
You are the Chief Information Security Officer (CISO) at a tech company. Your company is facing issues with silos between the development and operations teams, leading to inefficiencies and security vulnerabilities.<br><br>Which approach should you adopt to encourage collaboration and integrate security considerations at every stage of software development and deployment?
a)
Adopting a Development and Operations (DevOps) approach
b)
Establishing a Security Operations Center (SOC)
c)
Outsourcing security to a third party vendor
d)
Implementing a new security policy
5.
Your computer system is a participant in an asymmetric cryptography system. You've created a message to send to another user. Before transmission, you hash the message and encrypt the hash using your private key. You then attach this encrypted hash to your message as a digital signature before sending it to the other user.<br><br>In this example, which protection does the hashing activity provide?
a)
Integrity
b)
Availability
c)
Confidentiality
d)
Non-Repudiation
6.
Which of the following is a method of implementing security controls?
a)
Financial Controls
b)
Sales Controls
c)
Marketing Controls
d)
Managerial Controls
7.
Which of the following security challenges refers to the rapid and broad spread of an attack, often affecting a large number of computers in a relatively short amount of time?
a)
Attack scale and velocity
b)
Sophisticated Attacks
c)
Proliferation of attack Software
d)
Data encryption
8.
You are the Chief Information Security Officer (CISO) at a large corporation. Your company is expanding rapidly and the complexity of managing security across different business functions is increasing.<br><br>You need a dedicated team to monitor and protect critical information assets across the organization.<br><br>Which of the following would be the MOST effective solution?
a)
Outsourcing security to a third-party vendor
b)
Establishing a Security Operations Center (SOC)
c)
Implementing a new security policy
d)
Hiring more IT staff
9.
You are the head of the cybersecurity team at a large corporation. You notice an increase in network traffic that appears to be legitimate but is causing a slowdown in your systems.<br><br>Upon further inspection, you find that the traffic patterns vary each time, making it difficult to distinguish from normal traffic.<br><br>What type of security challenge are you MOST likely facing?
a)
Sophisticated attack
b)
Proliferation of attack software
c)
Data breach
d)
Attack scale and velocity
10.
You are the Chief Information Security Officer (CISO) at a large corporation. You have been tasked with implementing a new security control to protect sensitive customer data.<br><br>The control must be able to automatically detect and prevent unauthorized access to the data.<br><br>Which type of control should you implement?
a)
Operational control
b)
Technical control
c)
Physical control
d)
Managerial controls
100 %
