CIA Triad & Security Controls Flashcards
7 cards from real CCP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 CIA Triad & Security Controls flashcards as text
A digital signature on an email message provides evidence about which security property?
Answer: Non-repudiation
Digital signatures provide non-repudiation by proving the sender's identity and preventing them from denying they sent the message.
Which of the following is an example of a technical (logical) security control?
Answer: Access control list on a file server
An access control list (ACL) is a technical control implemented in software to restrict access to resources.
An organization uses offsite backups to ensure it can recover from a ransomware attack. Which CIA property do these backups primarily support?
Answer: Availability
Offsite backups support availability by enabling recovery and restoration of systems after a destructive attack.
A man-in-the-middle attack that alters financial transaction amounts during transmission violates which CIA property?
Answer: Integrity
Altering transaction data in transit is a direct violation of integrity, as the data is modified without authorization.
Which control is BEST described as a corrective control?
Answer: Patch management restoring a compromised system
Patch management that restores a compromised system is a corrective control because it fixes damage after an incident occurs.
Which of the following best illustrates defense in depth?
Answer: Layering firewalls, IDS, encryption, and physical controls together
Defense in depth uses multiple overlapping security layers so that if one control fails, others continue to provide protection.
Which CIA property is most at risk when a cloud storage provider experiences an extended outage?
Answer: Availability
A provider outage prevents users from accessing their data, which directly impacts availability.