CSI Information Security Basics 2

Question 1

Which of the following best describes the principle of least privilege in information security?

Accepted Answer

Users are granted only the minimum access rights necessary to perform their job functions

Answer

The principle of least privilege limits user access rights to only what is strictly required for their role, reducing the attack surface.

Question 2

A security investigator discovers that an employee copied sensitive files to a personal USB drive before resigning. This is an example of which type of threat?

Accepted Answer

Insider threat

Answer

An insider threat involves a current or former employee misusing authorized access to harm the organization.

Question 3

What does 'data at rest' refer to in the context of information security?

Accepted Answer

Data stored on devices such as hard drives or databases

Answer

Data at rest refers to inactive data stored physically in any digital form, such as databases, data warehouses, or file systems.

Question 4

Which encryption standard is currently recommended by NIST for protecting sensitive government information?

Accepted Answer

AES (Advanced Encryption Standard)

Answer

AES, particularly AES-256, is the NIST-approved standard for encrypting sensitive and classified government information.

Question 5

During a security investigation, you find logs showing repeated failed login attempts followed by a successful login from an unusual location. This pattern most likely indicates:

Accepted Answer

A brute force attack that eventually succeeded

Answer

Repeated failed logins followed by success from an unusual location is a classic indicator of a brute force attack achieving account compromise.

(CSI) Certified Security Investigator Practice Test

(CSI) Certified Security Investigator Practice Test

CSI Information Security Basics 2