Free IT Cybersecurity Principles & Protocols Questions and Answers — Questions and Answers
Question 1: What does the CIA triad stand for in cybersecurity?
- Control, Integrity, Authentication
- Confidentiality, Integrity, Availability (Correct answer)
- Cryptography, Information, Access
- Code, Infrastructure, Application
Correct answer: Confidentiality, Integrity, Availability
The CIA triad stands for Confidentiality, Integrity, and Availability, which are the three core principles of information security. Confidentiality ensures data is accessible only to authorized individuals, Integrity ensures data remains accurate and unaltered, and Availability ensures authorized users can access information and systems when needed. These pillars guide the development of robust security policies and practices.
Question 2: Which type of malware disguises itself as legitimate software?
- Worm
- Trojan (Correct answer)
- Ransomware
- Spyware
Correct answer: Trojan
A Trojan, or Trojan horse, is a type of malware that disguises itself as legitimate or useful software to trick users into installing it. Once executed, it can perform malicious actions such as stealing data, creating backdoors, or installing other malware, without the user's knowledge. Unlike viruses, Trojans do not self-replicate but rely on deception for distribution.
Question 3: What is phishing?
- Software update
- Firewall setting
- Social engineering attack (Correct answer)
- Network scanning tool
Correct answer: Social engineering attack
Phishing is a type of social engineering attack where attackers attempt to trick individuals into revealing sensitive information, such as usernames, passwords, and credit card details. This is typically achieved by impersonating a trustworthy entity through deceptive emails, messages, or websites that appear legitimate. Phishing exploits human psychology rather than technical vulnerabilities to gain unauthorized access.
Question 4: Which tool monitors network traffic for suspicious activity?
- Antivirus
- Firewall
- IDS (Correct answer)
- VPN
Correct answer: IDS
An IDS (Intrusion Detection System) is a security tool that monitors network traffic and system activities for malicious activity or policy violations. It detects suspicious patterns or known attack signatures and alerts administrators to potential threats. While a firewall blocks traffic, an IDS focuses on identifying and reporting intrusions that may have bypassed other defenses.
Question 5: What is the purpose of multi-factor authentication (MFA)?
- Faster logins
- Multiple usernames
- Enhance security (Correct answer)
- Avoid password use
Correct answer: Enhance security
Multi-factor authentication (MFA) significantly enhances security by requiring users to provide two or more verification factors to gain access to an account or system. This typically combines something the user knows (password), something the user has (phone, token), and/or something the user is (biometrics). This layered approach makes it much harder for unauthorized individuals to access accounts, even if one factor is compromised.
Question 6: Which protocol secures communication over the internet?
- HTTP
- FTP
- HTTPS (Correct answer)
- SMTP
Correct answer: HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP, the protocol used for communication over the internet. It encrypts the communication between a user's web browser and a website, protecting data from eavesdropping and tampering. This encryption is crucial for securing sensitive information like login credentials, financial transactions, and personal data transmitted online.
Question 7: What type of attack floods a system with traffic to disrupt services?
- Phishing
- Brute force
- DDoS (Correct answer)
- Spoofing
Correct answer: DDoS
A DDoS (Distributed Denial of Service) attack is a malicious attempt to disrupt the normal traffic of a targeted server, service, or network by overwhelming it with a flood of internet traffic. This traffic often originates from multiple compromised computer systems, making it difficult to block. The goal is to render the service unavailable to legitimate users by consuming its resources.
Question 8: Which of the following helps protect against unauthorized data access?
- Compression
- Encryption (Correct answer)
- Formatting
- Data deletion
Correct answer: Encryption
Encryption is the process of converting information or data into a code to prevent unauthorized access. It scrambles data into an unreadable format, making it unintelligible to anyone without the correct decryption key. This protection is vital for safeguarding sensitive information both in transit and at rest, ensuring confidentiality and preventing data breaches.
Question 9: Which principle ensures users only have access to the resources they need?
- Access sharing
- Least privilege (Correct answer)
- Role rotation
- User duplication
Correct answer: Least privilege
The principle of least privilege (PoLP) is a security concept where users, programs, or processes are granted only the minimum necessary permissions or access rights required to perform their specific tasks. This minimizes the potential damage from a security breach or error, as an attacker or compromised entity would have limited access to other systems or data. It's a fundamental practice for reducing an organization's attack surface.
Free IT Cybersecurity Principles & Protocols Questions and Answers
What does the CIA triad stand for in cybersecurity?