SFPC Information Security Fundamentals 2

Question 1

What are the three core principles of information security (the CIA Triad)?

Accepted Answer

Confidentiality, Integrity, Availability

Answer

The CIA Triad represents the three fundamental goals of information security: Confidentiality (protecting information from unauthorized access), Integrity (ensuring accuracy and completeness), and Availability (ensuring authorized users can access information when needed).

Question 2

What is 'two-factor authentication' (2FA)?

Accepted Answer

A security process requiring two different types of verification before granting access

Answer

2FA requires users to provide two different types of verification factors — something they know, something they have, or something they are — to access a system.

Question 3

What is the purpose of 'access control lists' (ACLs) in information security?

Accepted Answer

To specify which users or system processes have permission to access specific resources

Answer

ACLs define the permissions and restrictions for users or system processes accessing specific resources, implementing the principle of least privilege.

Question 4

What is 'defense in depth' in information security?

Accepted Answer

Using multiple layers of security controls so that if one fails, others still provide protection

Answer

Defense in depth is a security strategy that employs multiple layers of controls, ensuring that if one control fails, additional controls continue to provide protection.

Question 5

What is a 'penetration test' in information security?

Accepted Answer

An authorized simulated attack to evaluate the security of a system

Answer

A penetration test is an authorized, simulated attack against a system to identify vulnerabilities that could be exploited by real attackers.

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC Information Security Fundamentals 2