Security & Access Management Flashcards

What is the principle of least privilege?

Answer: Granting users only the minimum access necessary to perform their duties

The principle of least privilege limits access to the minimum necessary for job functions, reducing the attack surface and potential impact of compromised accounts.

Which authentication method provides the strongest security?

Answer: Multi-factor authentication combining different verification types

Multi-factor authentication combining different verification types (something you know, have, and are) provides the strongest protection against unauthorized access.

What is the primary purpose of security auditing?

Answer: To identify vulnerabilities and verify compliance with security policies

Security auditing identifies vulnerabilities, verifies policy compliance, and provides evidence of due diligence in protecting organizational assets.

How should security incidents be handled?

Answer: Following an established incident response plan with documentation

Following an established incident response plan ensures consistent, effective handling while documentation supports analysis, compliance, and future prevention.

What is the role of encryption in data security?

Answer: Protecting data confidentiality during storage and transmission

Encryption protects data confidentiality by making information unreadable without proper decryption keys, whether data is stored (at rest) or being transmitted (in transit).

Why is regular security training important for all staff?

Answer: Employees are often the weakest link in security and training reduces human error

Regular security training reduces human error, the most common cause of security breaches, by keeping all staff aware of current threats and proper procedures.