Information Security Management Flashcards

What are the three core principles of information security known as the CIA triad?

Answer: Confidentiality, Integrity, Availability

The CIA triad — Confidentiality, Integrity, and Availability — represents the three fundamental principles of information security.

Which type of attack attempts to overwhelm a system with traffic to make it unavailable?

Answer: Denial of Service (DoS) attack

A Denial of Service (DoS) attack floods a system with excessive traffic to exhaust resources and prevent legitimate access.

What is a firewall in information security?

Answer: A network security system that monitors and controls incoming/outgoing traffic

A firewall monitors and controls network traffic based on predetermined security rules, acting as a barrier between trusted and untrusted networks.

Which of the following best describes phishing?

Answer: Fraudulent attempts to obtain sensitive information by impersonating trusted entities

Phishing involves deceptive emails or websites that impersonate legitimate organizations to trick users into revealing passwords or financial information.

What is multi-factor authentication (MFA)?

Answer: Verifying identity using two or more independent authentication factors

MFA requires users to provide two or more verification factors to gain access, significantly reducing the risk of unauthorized access.

Which US federal law governs the protection of health information in digital systems?

Answer: HIPAA

HIPAA (Health Insurance Portability and Accountability Act) establishes standards for protecting sensitive patient health information in the US.