CSI Information Security Basics 3

Question 1

In information security, what does 'non-repudiation' mean?

Accepted Answer

Preventing a party from denying that they sent or received a message

Answer

Non-repudiation ensures that a party cannot deny the authenticity of their signature or the sending of a message, often achieved through digital signatures.

Question 2

A CSI investigator is reviewing chain of custody for digital evidence. Why is maintaining chain of custody critical?

Accepted Answer

It ensures evidence admissibility by documenting who handled it and when

Answer

Chain of custody documents every person who handled evidence and when, ensuring its integrity and admissibility in legal proceedings.

Question 3

Which of the following best describes social engineering in the context of information security?

Accepted Answer

Manipulating people psychologically to divulge confidential information

Answer

Social engineering exploits human psychology rather than technical vulnerabilities to trick individuals into revealing sensitive information or taking harmful actions.

Question 4

What is a vulnerability assessment?

Accepted Answer

A systematic review of security weaknesses in an information system

Answer

A vulnerability assessment systematically identifies, quantifies, and prioritizes security weaknesses in systems without actively exploiting them.

Question 5

During an investigation, an analyst finds that an attacker used SQL injection. Which security principle was most directly violated?

Accepted Answer

Input validation and secure coding practices

Answer

SQL injection exploits failures in input validation and secure coding, where user-supplied data is incorrectly trusted and passed to a database interpreter.

(CSI) Certified Security Investigator Practice Test

(CSI) Certified Security Investigator Practice Test

CSI Information Security Basics 3