Security Principles Flashcards
6 cards from real ISC2 CC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Security Principles flashcards as text
What is defense in depth?
Answer: Layering multiple security controls to protect assets
Defense in depth is a security strategy that uses multiple layers of controls so that if one fails, others still provide protection.
Which concept refers to ensuring systems and data are accessible when needed?
Answer: Availability
Availability ensures that information systems and data are accessible to authorized users when they need them.
What is a security baseline?
Answer: The minimum acceptable security level for a system
A security baseline defines the minimum security configuration requirements that all systems must meet.
Which of the following best describes the concept of due diligence in security?
Answer: Taking reasonable care to implement and maintain security controls
Due diligence in security means taking reasonable steps to identify and address security risks and maintain appropriate protections.
What does the term 'asset' mean in information security?
Answer: Anything of value that needs protection
An asset is anything of value to an organization — including data, systems, people, and physical resources — that requires protection.
Which of the following is the ISC2 Code of Ethics first canon?
Answer: Protect society, the common good, necessary public trust and confidence, and the infrastructure
The first canon of the ISC2 Code of Ethics is to protect society, the common good, necessary public trust and confidence, and the infrastructure.