SFPC Information Systems Security and Cybersecurity Basics

Question 1

Which three principles make up the CIA triad of information security?

Accepted Answer

Confidentiality, Integrity, Availability

Answer

The CIA triad is Confidentiality (prevent unauthorized disclosure), Integrity (prevent unauthorized modification), and Availability (ensure authorized users can access information when needed).

Question 2

What is a 'data spill' (spillage)?

Accepted Answer

Classified information placed on an unclassified or lower-classification system

Answer

A spillage occurs when information is transferred to a system not authorized for its classification level. It must be reported immediately and the affected systems isolated for cleanup. Users should not delete the data themselves or continue working on the system.

Question 3

Which principle limits users to only the access needed to perform their duties?

Accepted Answer

Least privilege

Answer

Least privilege restricts accounts to the minimum permissions required for the job, which reduces the damage from errors, misuse, or compromised accounts.

Question 4

Which practice best reduces the risk of unauthorized access when a password is stolen?

Accepted Answer

Using multi-factor authentication

Answer

Multi-factor authentication requires additional proof beyond a password, such as a CAC/PIV and PIN, so a stolen password alone is not enough to gain access.

Question 5

You receive an unexpected email with a link asking you to verify your account. What should you do?

Accepted Answer

Do not click; report it as suspected phishing through your organization's process

Answer

Unexpected links requesting credentials are classic phishing. Do not click or reply, and report the message to your security or help desk team following organization procedures.

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC Information Systems Security and Cybersecurity Basics