Security Principles Flashcards
6 cards from real ISC2 CC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Security Principles flashcards as text
What is the difference between a threat and a risk?
Answer: A threat is a potential danger; a risk combines threat likelihood and impact
A threat is a potential danger, while risk is the combination of that threat's likelihood and its potential impact.
Which security principle involves verifying that a user is who they claim to be?
Answer: Authentication
Authentication is the process of verifying the identity of a user, system, or entity.
What does the term 'least privilege' mean in security?
Answer: Restricting user access to only what is necessary for their job
Least privilege means users are granted only the minimum permissions necessary to perform their job functions.
Which of the following is an example of a physical security control?
Answer: Security badge reader
A security badge reader is a physical control that restricts physical access to facilities or areas.
What is the purpose of a security policy?
Answer: To document acceptable use and security requirements
A security policy documents an organization's rules, requirements, and acceptable use guidelines for information security.
Which term describes the likelihood that a threat will exploit a vulnerability?
Answer: Probability
Probability (or likelihood) refers to the chance that a specific threat will successfully exploit a given vulnerability.