CCS Security Principles and Practices

Question 1

What is the CIA triad in information security?

Accepted Answer

Confidentiality, Integrity, and Availability

Answer

Cryptography, Identity, and Authentication

Answer

Control, Investigation, and Authorization

Answer

Compliance, Insurance, and Auditing

Question 2

What is multi-factor authentication (MFA)?

Accepted Answer

Using two or more different types of verification to confirm identity

Answer

Using multiple passwords for the same account

Answer

Authenticating on multiple devices simultaneously

Answer

Having multiple administrators approve access

Question 3

What is the principle of least privilege?

Accepted Answer

Users should only have the minimum access needed to perform their job

Answer

All users should have administrator access

Answer

Privileges should be maximized for efficiency

Answer

Access rights should never be changed once granted

Question 4

What is a phishing attack?

Accepted Answer

A social engineering attack using fraudulent communications to steal sensitive information

Answer

A type of network scanning tool

Answer

A physical security breach

Answer

A denial of service attack

Question 5

What is encryption?

Accepted Answer

Converting data into a coded format that can only be read with the correct key

Answer

Compressing files to save storage space

Answer

Deleting sensitive data permanently

Answer

Backing up data to a remote server

Question 6

What should be included in an incident response plan?

Accepted Answer

Detection, containment, eradication, recovery, and lessons learned procedures

Answer

Only contact information for the IT department

Answer

A list of all company passwords

Answer

Instructions to ignore minor incidents