SFPC - Security Fundamentals Professional Information Security Fundamentals Questions and Answers

Question 1

A security analyst is reviewing access logs for a sensitive database server.
The analyst is primarily concerned with ensuring that the data has not been altered or deleted by unauthorized individuals.
Which principle of the CIA triad is the analyst's main focus?

Accepted Answer

Integrity

Answer

Confidentiality

Answer

Availability

Answer

Non-repudiation

Question 2

A small company has developed a new proprietary manufacturing process. They are concerned about competitors stealing their trade secrets. Which of the following is the BEST control to mitigate this risk?

Accepted Answer

Requiring all employees with access to the process documents to sign non-disclosure agreements (NDAs).

Answer

Implementing a firewall to block external network traffic.

Answer

Enforcing a strong password policy for all employees.

Answer

Installing antivirus software on all company computers.

Question 3

Which of the following describes the 'Availability' component of the CIA triad?

Accepted Answer

The assurance that authorized users can access information and systems when required.

Answer

The assurance that information is not disclosed to unauthorized individuals.

Answer

The process of verifying the identity of a user.

Answer

The guarantee that data is accurate and has not been tampered with.

Question 4

An organization is implementing a risk management program. After identifying potential threats and vulnerabilities, what is the logical next step in the risk management process?

Accepted Answer

Conduct a risk analysis.

Answer

Implement security controls.

Answer

Monitor and review the risks.

Answer

Create an incident response plan.

Question 5

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. This is an example of what type of attack?

Accepted Answer

Phishing

Answer

Denial-of-Service (DoS)

Answer

Man-in-the-Middle (MitM)

Answer

Malware injection

Question 6

According to the principle of least privilege, how should access to information and resources be granted?

Accepted Answer

Users should be granted the minimum level of access and permissions necessary to perform their job functions.

Answer

All users should be granted administrator-level access to ensure they can perform their duties.

Answer

Users should be granted access based on their job title and seniority within the company.

Answer

Access should be granted to groups of users rather than individuals to simplify management.

A security analyst is reviewing access logs for a sensitive database server.The analyst is primarily concerned with ensuring that the data has not been altered or deleted by unauthorized individuals.Which principle of the CIA triad is the analyst's main focus?

A security analyst is reviewing access logs for a sensitive database server.
The analyst is primarily concerned with ensuring that the data has not been altered or deleted by unauthorized individuals.
Which principle of the CIA triad is the analyst's main focus?