Preparation Resources Flashcards

Which of the following best describes the principle of least privilege?

Answer: Users should have the minimum level of access necessary to perform their job functions.

The principle of least privilege dictates that users, programs, or processes should be granted only the minimum necessary permissions or access rights required to perform their legitimate functions. This security best practice minimizes the potential damage from accidental errors, misuse, or malicious attacks by limiting the scope of what an compromised account can do. It reduces the attack surface and enhances overall system security.

What is the primary goal of a Business Continuity Plan (BCP)?

Answer: To maintain critical business functions during and after a disaster.

The primary goal of a Business Continuity Plan (BCP) is to ensure that an organization can maintain its critical business functions and operations during and after a disruptive event or disaster. This involves identifying essential processes, developing strategies to keep them running, and outlining recovery procedures. A BCP aims to minimize the impact of disruptions, reduce downtime, and facilitate a swift return to normal operations.

Which of the following is an example of multifactor authentication (MFA)?

Answer: Fingerprint and smart card

Multifactor Authentication (MFA) requires combining two or more distinct authentication factors from different categories to verify a user's identity. A fingerprint represents "something you are" (a biometric factor), while a smart card represents "something you have" (a possession factor). The combination of these two distinct factors makes "Fingerprint and smart card" a clear example of multifactor authentication, providing enhanced security.

Which protocol is used to securely transfer files over a network?

Answer: SFTP

SFTP, or Secure File Transfer Protocol, is specifically designed for securely transferring files over a network. It uses SSH (Secure Shell) to provide a secure channel, encrypting both the data and commands during transmission. This ensures confidentiality and integrity of the files being moved between systems.

What is the primary purpose of a Security Information and Event Management (SIEM) system?

Answer: To monitor and analyze security events in real-time

A Security Information and Event Management (SIEM) system's primary function is to collect, aggregate, and analyze security-related data from various sources across an organization's IT infrastructure. It provides real-time monitoring and correlation of security events, allowing for early detection of potential threats and incidents. This helps organizations identify and respond to security breaches more effectively.