Security Principles and Practices Flashcards
6 cards from real CCS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Security Principles and Practices flashcards as text
What is the CIA triad in information security?
Answer: Confidentiality, Integrity, and Availability
The CIA triad represents the three fundamental objectives of information security: keeping data confidential, maintaining its integrity, and ensuring its availability.
What is multi-factor authentication (MFA)?
Answer: Using two or more different types of verification to confirm identity
MFA combines two or more verification factors (something you know, have, or are) to provide stronger authentication.
What is the principle of least privilege?
Answer: Users should only have the minimum access needed to perform their job
Least privilege limits access rights to the minimum necessary for job functions, reducing the potential impact of security breaches.
What is a phishing attack?
Answer: A social engineering attack using fraudulent communications to steal sensitive information
Phishing uses deceptive emails, messages, or websites to trick users into revealing sensitive information like passwords or financial data.
What is encryption?
Answer: Converting data into a coded format that can only be read with the correct key
Encryption transforms readable data into an unreadable format, protecting it from unauthorized access even if intercepted.
What should be included in an incident response plan?
Answer: Detection, containment, eradication, recovery, and lessons learned procedures
A comprehensive incident response plan covers all phases from detecting the incident through post-incident learning.