Technology & Information Security Flashcards

What is the primary goal of information security?

Answer: Protect confidentiality, integrity, availability

The primary goal of information security is to protect the confidentiality, integrity, and availability (CIA triad) of information assets. Confidentiality ensures data is accessible only to authorized individuals, integrity ensures data is accurate and unaltered, and availability ensures authorized users can access data when needed. Achieving these three pillars safeguards information from unauthorized access, modification, or destruction.

Which technology helps prevent unauthorized access?

Answer: Access controls such as passwords

Access controls, such as strong passwords, multi-factor authentication, and role-based access, are fundamental technologies that help prevent unauthorized access to systems and data. They ensure that only authenticated and authorized individuals can gain entry to specific resources. By verifying user identities and permissions, these controls act as a critical barrier against malicious actors and insider threats.

What is encryption used for in information security?

Answer: Encode data for protection

Encryption is used in information security to encode data, transforming it into an unreadable format that protects it from unauthorized access. This process makes the data unintelligible to anyone without the correct decryption key. It is a vital tool for safeguarding sensitive information both when it is stored (data at rest) and when it is transmitted across networks (data in transit).

Why are firewalls important?

Answer: Block unauthorized traffic

Firewalls are crucial security components that act as a barrier between a trusted internal network and untrusted external networks, like the internet. Their primary function is to block unauthorized traffic and control network access based on predefined security rules. By filtering incoming and outgoing data packets, firewalls prevent malicious attacks and unauthorized access attempts, protecting the internal network from external threats.

What role does antivirus software play?

Answer: Detect and remove malware

Antivirus software plays a critical role in information security by detecting, preventing, and removing malicious software (malware) such as viruses, worms, and Trojans. It scans files and systems for known threats and suspicious behavior, protecting computers and networks from infection. This helps maintain the integrity and availability of data and systems, preventing data loss or compromise.

How does multi-factor authentication enhance security?

Answer: Requires multiple verification methods

Multi-factor authentication (MFA) enhances security by requiring users to provide two or more different verification methods to prove their identity. This typically combines something the user knows (like a password), something they have (like a phone or token), and/or something they are (like a fingerprint). Even if one factor is compromised, the additional factors prevent unauthorized access, significantly strengthening account security.

What is a common cause of data breaches?

Answer: Weak passwords and phishing

Weak passwords are easily compromised through guessing or brute-force attacks, while phishing schemes trick users into divulging sensitive information. Both methods exploit human vulnerabilities and are among the most common and effective ways attackers gain unauthorized access, leading to significant data breaches.

Why is security awareness training important?

Answer: Educates users on threats

Security awareness training is vital because it educates employees about various cyber threats like phishing, malware, and social engineering. By understanding these risks and best practices, users become a crucial first line of defense, significantly reducing the likelihood of human error leading to a security incident.

How should organizations respond to security incidents?

Answer: Follow response plan

Following a well-defined security incident response plan ensures a structured and efficient approach to managing breaches. This plan guides organizations through containment, eradication, recovery, and post-incident analysis, minimizing damage and facilitating a swift return to normal operations while learning from the event.