Common Security Concepts Quiz

Question 1

The term “CIA” triad us used to describe the basic principles of information security.

Answer 1

True

Question 2

Which of the following terms refer to the concept of confidentiality? (Select 2 answers)

Answer 2

Encryption
Access Control Methods
Steganography

Question 3

Which of the following terms refer(s) to the concept of integrity? (Select all that apply)

Answer 3

Hashing
Digital Signatures
Digital Certificates
Non-Repudiation

Question 4

Which of the following terms refer(s) to the concept of availability? (Select all that apply)

Answer 4

Redundancy
Fault tolerance
Load balancing
patch management

Question 5

Which term best describes a disgruntled emplyee abusing legitimate access to company’s internal resources?

Answer 5

Insider threat

Question 6

Which of the following statements does not match a typical description of nation states or state-funded groups identified as thread actors?

Answer 6

Typically classified as an internal threat

Question 7

Which of the following ansers refers to a vulnerability database?

Answer 7

CVE (Common Vulnerabilities and Exposures)

Question 8

A type of attack aimed at exploiting vulnerability that is present in already released software but unknown to the software developer is called:

Answer 8

Zero-day attack

Question 9

Which of the following violates the principle of least privilege?

Answer 9

Improperly configured accounts

Question 10

Which of the security measure listed below would be effective against the malicious insider threat? (Select 3 answers)

Answer 10

DLP system (Data Loss Prevention)
Principle of least privilege
Usage auditing and review

Question 11

The term “Zero Trust” in the context of network security means that none of the devices operating within the boundaries of a given network can be trusted by default even if they were previously verified.

Answer 11

True

Question 12

A concept of effective security posture employing multiple tools and different techniques to slow down an attacker is known as: (Select 2 answers)

Answer 12

Layers Security
Defense in depth

Question 13

A lightly protected subnet (previously known as a DMZ) consisting of publicly available servers placed on the outside of the company’s firewall is called:

Answer 13

Screened Subnet

Question 14

Which of the ansers listed below refers to a concept of having more than one person required to complete a given task?

Answer 14

Separation of duties