CSC Access Control & Perimeter Security 1

Question 1

What is the principle of least privilege?

Accepted Answer

Granting users only the minimum access necessary to perform their duties

Answer

Giving all users administrator access for convenience

Answer

Restricting access only for external users

Answer

Removing all access until requested

Question 2

Which authentication method provides the strongest security?

Accepted Answer

Multi-factor authentication combining different verification types

Answer

Complex passwords alone

Answer

Single sign-on without additional factors

Answer

Security questions based on personal information

Question 3

What is the primary purpose of security auditing?

Accepted Answer

To identify vulnerabilities and verify compliance with security policies

Answer

To find reasons to terminate employees

Answer

To justify security spending

Answer

To create busy work for the security team

Question 4

How should security incidents be handled?

Accepted Answer

Following an established incident response plan with documentation

Answer

Fixing the issue and not reporting it

Answer

Waiting to see if it happens again

Answer

Blaming the affected user

Question 5

What is the role of encryption in data security?

Accepted Answer

Protecting data confidentiality during storage and transmission

Answer

Making data permanently inaccessible

Answer

Replacing the need for access controls

Answer

Only required for financial data

Question 6

Why is regular security training important for all staff?

Accepted Answer

Employees are often the weakest link in security and training reduces human error

Answer

It is only needed for IT staff

Answer

It replaces the need for technical security controls

Answer

It is only required annually for compliance