IGP Technology & Information Security 3 — Questions and Answers
Question 1: Under NIST SP 800-53, which control family addresses audit and accountability requirements?
- Access Control (AC)
- Audit and Accountability (AU) (Correct answer)
- System and Communications Protection (SC)
- Incident Response (IR)
Correct answer: Audit and Accountability (AU)
NIST SP 800-53's Audit and Accountability (AU) control family covers requirements for creating, protecting, and retaining audit records.
Question 2: A company stores customer PII in a database. Which technique replaces sensitive values with non-sensitive placeholders while preserving referential integrity?
- Encryption
- Tokenization (Correct answer)
- Hashing
- Redaction
Correct answer: Tokenization
Tokenization substitutes sensitive data values with non-sensitive tokens that can reference the original data, preserving system functionality without exposing PII.
Question 3: Which attack type involves inserting malicious SQL commands into an input field to manipulate a database?
- Cross-site scripting (XSS)
- SQL injection (Correct answer)
- Man-in-the-middle attack
- Brute force attack
Correct answer: SQL injection
SQL injection attacks exploit inadequate input validation by inserting SQL commands that manipulate or expose database contents.
Question 4: In the context of information security, what does 'non-repudiation' ensure?
- Data cannot be read by unauthorized parties
- A sender cannot deny having sent a message (Correct answer)
- Data remains unchanged during transmission
- Users are authenticated before access is granted
Correct answer: A sender cannot deny having sent a message
Non-repudiation provides proof of the origin and integrity of data, ensuring that a sender cannot later deny having sent a message or performed an action.
Question 5: What is the primary function of a Public Key Infrastructure (PKI)?
- Manage firewall rules across the enterprise
- Issue and manage digital certificates that bind public keys to identities (Correct answer)
- Provide two-factor authentication for remote users
- Scan email attachments for malware
Correct answer: Issue and manage digital certificates that bind public keys to identities
PKI is a framework that issues, manages, and revokes digital certificates that cryptographically bind a public key to an entity's identity.
Question 6: Which privacy-enhancing technique allows analysis of aggregate data trends without exposing individual records?
- Full database encryption
- Data anonymization and aggregation (Correct answer)
- Access control lists
- Digital watermarking
Correct answer: Data anonymization and aggregation
Anonymization and aggregation strip or obscure individual identifiers so that statistical analysis can occur without revealing personal information.
Question 7: A healthcare organization must ensure audit trails cannot be tampered with. Which control BEST achieves this?
- Storing logs on the same server as the application
- Writing logs to a write-once, read-many (WORM) storage system (Correct answer)
- Compressing logs to save storage space
- Rotating logs weekly to a backup tape
Correct answer: Writing logs to a write-once, read-many (WORM) storage system
WORM storage prevents any modification or deletion of log data after it is written, ensuring the integrity and immutability of audit trails.
IGP Technology & Information Security 3
Under NIST SP 800-53, which control family addresses audit and accountability requirements?