SFPC Information Security Fundamentals 2

Question 1

What are the three core principles of information security (the CIA Triad)?

Accepted Answer

Confidentiality, Integrity, Availability

Answer

Confidentiality, Intelligence, Authentication

Answer

Control, Integrity, Authorization

Answer

Classification, Investigation, Assessment

Question 2

What is 'two-factor authentication' (2FA)?

Accepted Answer

A security process requiring two different types of verification before granting access

Answer

Using two separate computers to access a system

Answer

Having two passwords for a single account

Answer

Logging in twice to confirm identity

Question 3

What is the purpose of 'access control lists' (ACLs) in information security?

Accepted Answer

To specify which users or system processes have permission to access specific resources

Answer

To track employee attendance

Answer

To organize files alphabetically

Answer

To monitor network traffic volumes

Question 4

What is 'defense in depth' in information security?

Accepted Answer

Using multiple layers of security controls so that if one fails, others still provide protection

Answer

Encrypting only the most sensitive data

Answer

Defending only the perimeter of a network

Answer

Using the most advanced security technology available

Question 5

What is a 'penetration test' in information security?

Accepted Answer

An authorized simulated attack to evaluate the security of a system

Answer

Testing network cable connections

Answer

A type of malware

Answer

A method for recovering deleted files

Question 6

What is 'data classification' in an organizational context?

Accepted Answer

The process of categorizing data based on its sensitivity and the impact of unauthorized disclosure

Answer

Organizing files by date created

Answer

Sorting database records alphabetically

Answer

Identifying duplicate records in a database