Certification Domains Flashcards

Which of the following is NOT a component of CIA triad?

Answer: Authentication

The CIA triad is a foundational model in information security, representing three core principles: Confidentiality, Integrity, and Availability. Confidentiality ensures data privacy, Integrity ensures data accuracy and trustworthiness, and Availability ensures systems and data are accessible when needed. Authentication is a mechanism used to enforce these principles, particularly confidentiality and integrity, but it is not one of the three core principles itself.

What is the purpose of a Business Continuity Plan (BCP)?

Answer: To maintain operations during a disruptive event

A Business Continuity Plan (BCP) is a comprehensive strategy designed to ensure that an organization can continue to operate its critical functions during and after a disruptive event, such as a natural disaster, cyberattack, or system failure. Its primary purpose is to minimize downtime and financial losses by outlining procedures, resources, and responsibilities for maintaining essential business operations. It focuses on organizational resilience rather than just IT systems.

Which of the following is an example of multifactor authentication (MFA)?

Answer: Password and fingerprint

Multifactor Authentication (MFA) requires a user to provide two or more distinct forms of verification from different categories to gain access to a system or account. These categories typically include something you know (like a password), something you have (like a smart card or phone), and something you are (like a fingerprint or biometric). A password and fingerprint combine "something you know" with "something you are," making it a valid MFA example.

What is the primary purpose of a firewall in network security?

Answer: To prevent unauthorized access to network resources

A firewall acts as a security barrier, monitoring and controlling incoming and outgoing network traffic based on predefined security rules. Its primary purpose is to prevent unauthorized access to private network resources by filtering out malicious or suspicious data packets. By enforcing these rules, firewalls protect networks from various cyber threats and ensure only legitimate traffic can pass through.

What is a key activity in vulnerability management?

Answer: Scanning for vulnerabilities

Vulnerability management is a continuous process of identifying, assessing, prioritizing, and remediating security weaknesses in systems and applications. A key activity in this process is regularly scanning for vulnerabilities, which involves using specialized tools to detect known security flaws and misconfigurations. This proactive identification is crucial for understanding an organization's attack surface and implementing timely patches or fixes.