ISC2 CC Security Principles 1 — Questions and Answers
Question 1: What does the CIA triad stand for in information security?
- Confidentiality, Integrity, Availability (Correct answer)
- Control, Identity, Access
- Compliance, Implementation, Assurance
- Centralization, Integration, Authorization
Correct answer: Confidentiality, Integrity, Availability
The CIA triad represents Confidentiality, Integrity, and Availability — the three core principles of information security.
Question 2: Which concept ensures that information is accessible only to authorized individuals?
- Integrity
- Availability
- Confidentiality (Correct answer)
- Non-repudiation
Correct answer: Confidentiality
Confidentiality ensures that information is accessible only to those who are authorized to view it.
Question 3: What is the primary goal of integrity in information security?
- Ensuring data is always available
- Preventing unauthorized data modification (Correct answer)
- Encrypting data at rest
- Controlling user access
Correct answer: Preventing unauthorized data modification
Integrity ensures that data is accurate and has not been tampered with by unauthorized parties.
Question 4: Which term describes the process of identifying potential threats and their likelihood?
- Vulnerability assessment
- Risk analysis (Correct answer)
- Penetration testing
- Security audit
Correct answer: Risk analysis
Risk analysis involves identifying threats, their likelihood, and their potential impact on an organization.
Question 5: What is a vulnerability in security terms?
- A realized attack on a system
- A weakness that can be exploited (Correct answer)
- A security control that failed
- A threat actor targeting a system
Correct answer: A weakness that can be exploited
A vulnerability is a weakness in a system, process, or control that could be exploited by a threat.
Question 6: Which of the following best describes non-repudiation?
- Ensuring data is not modified
- Proving a user's identity
- Ensuring a sender cannot deny sending a message (Correct answer)
- Preventing unauthorized access
Correct answer: Ensuring a sender cannot deny sending a message
Non-repudiation provides proof that a specific party sent or received information, preventing them from later denying it.
ISC2 CC Security Principles 1
What does the CIA triad stand for in information security?