Technology & Information Systems Flashcards

What is two-factor authentication (2FA)?

Answer: A security process requiring users to provide two different verification factors to access an account

Two-factor authentication requires users to verify their identity using two distinct factors—typically something they know (password) and something they have (phone or token)—before granting access.

What is the key difference between data backup and disaster recovery?

Answer: Backup preserves copies of data, while disaster recovery encompasses the full process to restore operations after a failure

Data backup is the process of copying and archiving data, while disaster recovery is the broader strategy and set of procedures for restoring systems and operations following a disruptive event.

What does SaaS stand for in the context of business software?

Answer: Software as a Service

SaaS (Software as a Service) is a cloud-based software delivery model where applications are hosted by a vendor and accessed by users over the internet, typically via a subscription.

Which of the following is an example of social engineering in a cybersecurity context?

Answer: Manipulating an employee through deception into revealing confidential login credentials

Social engineering attacks exploit human psychology rather than technical vulnerabilities, tricking individuals into divulging confidential information or performing actions that compromise security.

What is data encryption?

Answer: Converting data into a coded format readable only with the correct decryption key

Encryption transforms readable data (plaintext) into an unreadable format (ciphertext) using an algorithm and key, ensuring only authorized parties with the decryption key can access the original information.

What is a primary advantage of cloud-based software for a small business operator?

Answer: Lower upfront costs with the ability to scale resources based on actual business needs

Cloud-based software eliminates large upfront infrastructure investments and allows businesses to scale usage up or down based on need, converting capital expenses into predictable operating expenses.

Which of the following best defines a data breach?

Answer: An unauthorized access to or disclosure of sensitive, protected, or confidential information

A data breach is a security incident in which unauthorized individuals gain access to confidential or protected information, potentially exposing customer data, financial records, or trade secrets.