#1
In the context of information security, what does CIA stand for?
Confidentiality, Integrity, Availability
ExplanationFundamental security principles: Confidentiality, Integrity, Availability.
#2
Which security protocol is commonly used for secure web browsing?
SSL/TLS
ExplanationCommon protocol for secure web browsing.
#3
Which of the following is NOT a security protocol?
RAM
ExplanationNot a security protocol.
#4
Which of the following is a best practice for securing information?
Regularly update passwords.
ExplanationBest practice: Regularly update passwords.
#5
Which of the following is an example of a strong password?
P@ssw0rd!
ExplanationExample of strong password: P@ssw0rd!
#6
What is derivative classification?
The process of assigning a classification to information based on an existing classification and its derivations.
ExplanationClassification process based on existing classifications and derivations.
#7
Which of the following is a security protocol used to protect data transmitted over a network?
SSL/TLS
ExplanationSecure data transmission protocol.
#8
What is the purpose of marking classified information?
To ensure that information is protected and handled appropriately.
ExplanationEnsure appropriate handling and protection of classified information.
#9
What is the purpose of derivative classification markings?
To indicate the derivative classification of the information.
ExplanationIndicate the classification derivation of information.
#10
What is the purpose of security protocols in a network?
To prevent unauthorized access and ensure data integrity and confidentiality.
ExplanationEnsure network security, data integrity, and confidentiality.
#11
What is the purpose of an audit in information security?
To prevent unauthorized access and ensure data integrity and confidentiality.
ExplanationEnsure security, data integrity, and confidentiality through audits.
#12
What is the purpose of access control in information security?
To prevent unauthorized access to information and resources.
ExplanationPrevent unauthorized access to resources.
#13
Which of the following is a common method of access control?
Biometric authentication
ExplanationCommon access control method.
#14
What is the purpose of encryption in information security?
To prevent unauthorized access and ensure data integrity and confidentiality.
ExplanationEnsure security, data integrity, and confidentiality through encryption.
#15
What is the role of a data owner in information security?
To prevent unauthorized access to information and resources.
ExplanationPrevent unauthorized access to information and resources.
#16
What is the purpose of a security policy?
To prevent unauthorized access to information and resources.
ExplanationPrevent unauthorized access to information and resources.
#17
Which of the following is a physical security measure?
Security guard
ExplanationPhysical security measure: Security guard.
#18
What is the purpose of a security awareness program?
To educate employees about security policies and procedures.
ExplanationEducate employees about security policies and procedures.
#19
What is the principle of least privilege in information security?
Give users access only to the resources necessary to perform their job functions.
ExplanationUsers should have minimal access required for their job roles.
#20
What is the purpose of network segmentation in information security?
To separate network resources to improve security.
ExplanationImprove security by separating network resources.
#21
Which of the following is a common method of social engineering?
Phishing
ExplanationCommon social engineering method: Phishing.
#22
What is the purpose of penetration testing?
To identify and address vulnerabilities in a system.
ExplanationIdentify and address system vulnerabilities.
#23
Which of the following is NOT a derivative classification decision factor?
Clarity
ExplanationNot a factor in derivative classification decisions.
#24
Which of the following is a key principle of derivative classification?
Avoid over-classification.
ExplanationKey principle: Avoid over-classifying information.
#25
What is the difference between derivative classification and original classification?
Derivative classification involves classifying information for the first time, while original classification involves assigning a classification to information based on an existing classification and its derivations.
ExplanationDerivative classification involves initial classification; original classification involves based on existing classifications.