CIW CIW Security Analyst 3

Question 1

What does the CIA triad stand for in information security?

Accepted Answer

Confidentiality, Integrity, Availability

Answer

The CIA triad — Confidentiality, Integrity, and Availability — represents the three core objectives of any information security program.

Question 2

What is a security patch?

Accepted Answer

A software update that fixes known security vulnerabilities in an application or operating system

Answer

A security patch is a software update released by vendors to fix specific vulnerabilities that could be exploited by attackers.

Question 3

What is social engineering in cybersecurity?

Accepted Answer

Manipulating people through psychological tactics to divulge confidential information or perform harmful actions

Answer

Social engineering exploits human psychology rather than technical vulnerabilities to trick individuals into compromising security.

Question 4

What is the purpose of an intrusion detection system (IDS)?

Accepted Answer

Monitor network or system activity for malicious behavior and generate alerts

Answer

An IDS monitors traffic and system events for signs of attacks or policy violations, alerting administrators when suspicious activity is detected.

Question 5

Which of the following is an example of a strong password practice?

Accepted Answer

Using a long, unique combination of letters, numbers, and symbols for each account

Answer

Strong password hygiene requires long, complex, unique passwords for each account — ideally managed with a password manager.

CIW - Certified Internet Web Professional Practice Test