CIW Security Analyst Flashcards

What does the CIA triad stand for in information security?

Answer: Confidentiality, Integrity, Availability

The CIA triad — Confidentiality, Integrity, and Availability — represents the three core objectives of any information security program.

What is a security patch?

Answer: A software update that fixes known security vulnerabilities in an application or operating system

A security patch is a software update released by vendors to fix specific vulnerabilities that could be exploited by attackers.

What is social engineering in cybersecurity?

Answer: Manipulating people through psychological tactics to divulge confidential information or perform harmful actions

Social engineering exploits human psychology rather than technical vulnerabilities to trick individuals into compromising security.

What is the purpose of an intrusion detection system (IDS)?

Answer: Monitor network or system activity for malicious behavior and generate alerts

An IDS monitors traffic and system events for signs of attacks or policy violations, alerting administrators when suspicious activity is detected.

Which of the following is an example of a strong password practice?

Answer: Using a long, unique combination of letters, numbers, and symbols for each account

Strong password hygiene requires long, complex, unique passwords for each account — ideally managed with a password manager.

What is ransomware?

Answer: Malware that encrypts a victim's files and demands payment for the decryption key

Ransomware is malicious software that encrypts files on the victim's system, then demands a ransom payment in exchange for the decryption key.