Practice Test GeeksSFPC - Security Fundamentals Professional Certification Practice Test
← All SFPC Flashcard Decks

Information Security Fundamentals Flashcards

6 cards from real SFPC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Information Security Fundamentals flashcards as text

  1. What are the three core principles of information security (the CIA Triad)?

    Answer: Confidentiality, Integrity, Availability

    The CIA Triad represents the three fundamental goals of information security: Confidentiality (protecting information from unauthorized access), Integrity (ensuring accuracy and completeness), and Availability (ensuring authorized users can access information when needed).

  2. What is 'two-factor authentication' (2FA)?

    Answer: A security process requiring two different types of verification before granting access

    2FA requires users to provide two different types of verification factors — something they know, something they have, or something they are — to access a system.

  3. What is the purpose of 'access control lists' (ACLs) in information security?

    Answer: To specify which users or system processes have permission to access specific resources

    ACLs define the permissions and restrictions for users or system processes accessing specific resources, implementing the principle of least privilege.

  4. What is 'defense in depth' in information security?

    Answer: Using multiple layers of security controls so that if one fails, others still provide protection

    Defense in depth is a security strategy that employs multiple layers of controls, ensuring that if one control fails, additional controls continue to provide protection.

  5. What is a 'penetration test' in information security?

    Answer: An authorized simulated attack to evaluate the security of a system

    A penetration test is an authorized, simulated attack against a system to identify vulnerabilities that could be exploited by real attackers.

  6. What is 'data classification' in an organizational context?

    Answer: The process of categorizing data based on its sensitivity and the impact of unauthorized disclosure

    Data classification is the process of categorizing organizational data based on its sensitivity level and the potential impact of unauthorized disclosure, loss, or modification.