Security Principles and Practices Flashcards

What is the CIA triad in information security?

Answer: Confidentiality, Integrity, and Availability

The CIA triad represents the three fundamental objectives of information security: keeping data confidential, maintaining its integrity, and ensuring its availability.

What is multi-factor authentication (MFA)?

Answer: Using two or more different types of verification to confirm identity

MFA combines two or more verification factors (something you know, have, or are) to provide stronger authentication.

What is the principle of least privilege?

Answer: Users should only have the minimum access needed to perform their job

Least privilege limits access rights to the minimum necessary for job functions, reducing the potential impact of security breaches.

What is a phishing attack?

Answer: A social engineering attack using fraudulent communications to steal sensitive information

Phishing uses deceptive emails, messages, or websites to trick users into revealing sensitive information like passwords or financial data.

What is encryption?

Answer: Converting data into a coded format that can only be read with the correct key

Encryption transforms readable data into an unreadable format, protecting it from unauthorized access even if intercepted.

What should be included in an incident response plan?

Answer: Detection, containment, eradication, recovery, and lessons learned procedures

A comprehensive incident response plan covers all phases from detecting the incident through post-incident learning.