YPT Policy Compliance 1 — Questions and Answers
Question 1: What is the CIA triad in information security?
- Confidentiality, Integrity, Availability (Correct answer)
- Central Intelligence Agency
- Cybersecurity Infrastructure Act
- Certified Information Auditor
Correct answer: Confidentiality, Integrity, Availability
The CIA triad represents three core security principles: Confidentiality (keeping data private), Integrity (data accuracy), Availability (systems accessible when needed).
Question 2: What is multi-factor authentication (MFA)?
- Requiring two or more verification methods to confirm identity (Correct answer)
- Using multiple passwords
- Having multiple accounts
- Logging in from multiple devices
Correct answer: Requiring two or more verification methods to confirm identity
MFA combines two or more authentication factors (something you know, have, or are) for stronger identity verification.
Question 3: What is a firewall?
- A security device that monitors and controls network traffic based on rules (Correct answer)
- A fire-resistant building component
- An antivirus program
- A password manager
Correct answer: A security device that monitors and controls network traffic based on rules
Firewalls filter incoming and outgoing network traffic based on security rules, creating a barrier between trusted and untrusted networks.
Question 4: What is phishing?
- A social engineering attack using fraudulent communications to steal sensitive data (Correct answer)
- A network scanning tool
- A type of firewall
- A backup system
Correct answer: A social engineering attack using fraudulent communications to steal sensitive data
Phishing uses deceptive emails, websites, or messages that appear legitimate to trick victims into revealing passwords, credit cards, or personal information.
Question 5: What is encryption?
- Converting data into coded format to prevent unauthorized access (Correct answer)
- Deleting data
- Compressing files
- Backing up data
Correct answer: Converting data into coded format to prevent unauthorized access
Encryption transforms readable data into unreadable ciphertext using algorithms and keys, ensuring only authorized parties can access the information.
Question 6: What is a zero-day vulnerability?
- A security flaw unknown to the vendor with no available patch (Correct answer)
- A vulnerability that was fixed immediately
- A low-risk security issue
- An outdated software version
Correct answer: A security flaw unknown to the vendor with no available patch
Zero-day vulnerabilities are newly discovered security flaws that the vendor doesn't know about yet, giving them 'zero days' to fix it before potential exploitation.
YPT Policy Compliance 1
What is the CIA triad in information security?