SFPC - Security Fundamentals Professional Information Security Fundamentals Questions and Answers 1 — Questions and Answers
Question 1: A security analyst is reviewing access logs for a sensitive database server. The analyst is primarily concerned with ensuring that the data has not been altered or deleted by unauthorized individuals. Which principle of the CIA triad is the analyst's main focus?
- Confidentiality
- Integrity (Correct answer)
- Availability
- Non-repudiation
Correct answer: Integrity
Integrity is the principle that ensures data is trustworthy and has not been subject to unauthorized modification or destruction. The analyst's focus on preventing alteration or deletion directly relates to maintaining the integrity of the data.
Question 2: A small company has developed a new proprietary manufacturing process. They are concerned about competitors stealing their trade secrets. Which of the following is the BEST control to mitigate this risk?
- Implementing a firewall to block external network traffic.
- Enforcing a strong password policy for all employees.
- Requiring all employees with access to the process documents to sign non-disclosure agreements (NDAs). (Correct answer)
- Installing antivirus software on all company computers.
Correct answer: Requiring all employees with access to the process documents to sign non-disclosure agreements (NDAs).
While technical controls like firewalls and passwords are important, the most direct control to protect trade secrets from being shared by authorized individuals (insiders) is a legal control like a non-disclosure agreement (NDA). It legally binds employees to protect the company's confidential information.
Question 3: Which of the following describes the 'Availability' component of the CIA triad?
- The assurance that information is not disclosed to unauthorized individuals.
- The process of verifying the identity of a user.
- The guarantee that data is accurate and has not been tampered with.
- The assurance that authorized users can access information and systems when required. (Correct answer)
Correct answer: The assurance that authorized users can access information and systems when required.
Availability ensures that systems, applications, and data are accessible to authorized users when they need them. It involves protecting against downtime caused by hardware failures, software bugs, or malicious attacks like Denial of Service (DoS).
Question 4: An organization is implementing a risk management program. After identifying potential threats and vulnerabilities, what is the logical next step in the risk management process?
- Implement security controls.
- Conduct a risk analysis. (Correct answer)
- Monitor and review the risks.
- Create an incident response plan.
Correct answer: Conduct a risk analysis.
The standard risk management process involves identifying assets, threats, and vulnerabilities, and then analyzing the risk. Risk analysis involves evaluating the likelihood of a threat exploiting a vulnerability and the potential impact it would have on the organization. This analysis is crucial before deciding which controls to implement.
Question 5: A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. This is an example of what type of attack?
- Denial-of-Service (DoS)
- Man-in-the-Middle (MitM)
- Phishing (Correct answer)
- Malware injection
Correct answer: Phishing
Phishing is a type of social engineering attack where an attacker sends fraudulent communications that appear to come from a reputable source, usually a financial institution or other service provider. The goal is to deceive the recipient into revealing sensitive information such as login credentials or credit card numbers.
Question 6: According to the principle of least privilege, how should access to information and resources be granted?
- All users should be granted administrator-level access to ensure they can perform their duties.
- Users should be granted access based on their job title and seniority within the company.
- Users should be granted the minimum level of access and permissions necessary to perform their job functions. (Correct answer)
- Access should be granted to groups of users rather than individuals to simplify management.
Correct answer: Users should be granted the minimum level of access and permissions necessary to perform their job functions.
The principle of least privilege is a fundamental concept in information security that states a user should only have the minimum set of permissions required to perform their specific job responsibilities, and nothing more. This helps to limit the damage that can be caused by an accident, error, or a compromised user account.
SFPC - Security Fundamentals Professional Information Security Fundamentals Questions and Answers 1
A security analyst is reviewing access logs for a sensitive database server.
The analyst is primarily concerned with ensuring that the data has not been altered or deleted by unauthorized individuals.
Which principle of the CIA triad is the analyst's main focus?