CSCU Security 2

Question 1

What is the CIA triad in information security?

Accepted Answer

The three core principles of information security: Confidentiality, Integrity, and Availability

Answer

The CIA triad represents the three fundamental pillars of information security: Confidentiality (protecting data from unauthorized access), Integrity (ensuring data accuracy), and Availability (ensuring data is accessible when needed).

Question 2

What is social engineering in cybersecurity?

Accepted Answer

Psychological manipulation of people to trick them into revealing confidential information or performing security-compromising actions

Answer

Social engineering exploits human psychology rather than technical vulnerabilities, manipulating people through deception, urgency, authority, or trust into bypassing security procedures.

Question 3

What is the purpose of a security audit?

Accepted Answer

To systematically evaluate an organization's security posture, identify vulnerabilities, and verify compliance with security policies and standards

Answer

A security audit systematically examines an organization's information systems, policies, and practices to identify vulnerabilities, verify compliance, and recommend improvements.

Question 4

What is multi-factor authentication (MFA) and why is it effective?

Accepted Answer

Requiring two or more different types of verification factors to prove identity, making account compromise significantly harder

Answer

MFA combines two or more independent authentication factors—something you know, something you have, and something you are—so compromising one factor alone is insufficient for access.

Question 5

What is a zero-day vulnerability?

Accepted Answer

A previously unknown software vulnerability that is exploited by attackers before the vendor has developed a patch

Answer

A zero-day vulnerability is an unknown software flaw that attackers discover and exploit before the software vendor is aware of it or has released a fix, leaving zero days for users to protect themselves.

CSCU - Certified Secure Computer User Practice Test

CSCU - Certified Secure Computer User Practice Test

CSCU Security 2