ITF+ Information Security Principles Flashcards

Which of the following BEST describes the purpose of an antivirus program?

Answer: To detect, quarantine, and remove malicious software from a system

Antivirus software scans systems for known malware signatures and behaviors, then isolates or removes threats it finds.

A company requires employees to use separate accounts for administrative tasks vs. everyday tasks. What security principle does this enforce?

Answer: Separation of duties

Separation of duties limits the damage from a compromised account by ensuring privileged actions require a separate, dedicated account.

What is spyware?

Answer: Software that secretly collects user information without their knowledge

Spyware secretly monitors and collects user activity, keystrokes, or personal data and sends it to a third party.

Which of the following is the MOST effective way to protect data on a lost or stolen laptop?

Answer: Enable full-disk encryption

Full-disk encryption renders all stored data unreadable without the correct decryption key, protecting it even if the device is physically stolen.

Which term describes a network of infected computers controlled by an attacker?

Answer: Botnet

A botnet is a collection of malware-infected computers ('bots') that an attacker remotely controls, often to send spam or launch attacks.

What is the purpose of security awareness training for employees?

Answer: To help employees recognize and respond appropriately to security threats

Security awareness training educates employees to identify threats like phishing and social engineering, reducing human-factor vulnerabilities.

A user is prompted to allow an app permission to access their contacts, camera, and location. What security principle should guide their decision?

Answer: Grant only the permissions the app genuinely needs to function

Applying least privilege to app permissions means only granting access that is necessary for the app's intended purpose.