Operational Security (OPSEC) and Security Fundamentals Quiz

Protecting sensitive information by controlling what information is shared and with whom.

Disclosing information freely without considering its sensitivity or impact on security.

Monitoring and controlling incoming and outgoing network traffic based on predetermined security rules.

Deceiving individuals to divulge sensitive information through fraudulent emails or websites.

Establishing encrypted connections over the internet to access private networks securely from remote locations.

Verifying a user's identity based on unique identifiers such as usernames or passwords.

Aggregating and analyzing security data from various sources to identify and respond to potential threats.

Using deceptive emails or messages to trick individuals into revealing confidential information.

Converting plaintext into ciphertext to secure data transmission and storage against unauthorized access.

Preventing unauthorized individuals from viewing sensitive information by obstructing their view.

Segregating sensitive information or functions to limit access and reduce risk.

Assessing potential vulnerabilities and risks to implement effective security measures.

Simulating cyber-attacks to evaluate the effectiveness of security measures and identify vulnerabilities.

Securing data by encoding it in a way that only authorized parties can access and understand.

Updating software to fix security flaws and protect systems from potential cyber-attacks.

Concealing secret data within non-secret data to prevent detection.

Using multiple forms of authentication such as passwords, biometrics, or security tokens to verify identity.

Creating a neutral zone between internal and external networks to enhance security by restricting direct access.

Confining potentially harmful programs within a restricted environment to assess their impact without risking system integrity.

Permitting only authorized applications to execute on a system, reducing the risk of malware infiltration.

Granting minimal access rights necessary for tasks, reducing the risk of data exposure.

Minimizing access rights to the bare minimum required for performing tasks, reducing potential damage from breaches.

Regulating network access by specifying which users or systems are allowed or denied access to resources.

Monitoring, filtering, and blocking HTTP traffic between a web application and the internet to prevent attacks.

Software designed to block unauthorized access to or from a private network, not typically considered malware.