A+ - 16A - Explain Attacks, Threats, and Vulnerabilities

What are the three properties of secure information, according to the CIA triad?

• Confidentiality, integrity, and authentication

• Confidentiality, integrity, and availability

• Confidentiality, accessibility, and authenticity

• Confidentiality, reliability, and authorization

What term specifically refers to controls that protect against attacks on computer storage and processing systems?

• Information security

• Cybersecurity

• Network security

• Data encryption

What is the main purpose of hardening a system?

• To make it more user-friendly

• To increase its attack surface

• To make it more secure

• To reduce its accessibility

What is a vulnerability?

• A potential threat actor

• A security policy

• A weakness that could be exploited

• A secure configuration

Which type of attack relies on obtaining information about the network and its security controls?

• Footprinting

• Spoofing

• Phishing

• Shoulder surfing

What is the purpose of a cryptographic hash?

• To encrypt data

• To verify data integrity

• To generate a digital signature

• To exchange encryption keys

What type of encryption uses a single secret key for both encryption and decryption?

• Asymmetric encryption

• Triple DES

• Symmetric encryption

• RSA encryption

What is the primary goal of a denial of service (DoS) attack?

• To steal data

• To gain unauthorized access

• To disrupt service availability

• To impersonate a trusted user

Which type of attack exploits user input validation vulnerabilities in web applications?

• Cross-site scripting (XSS)

• Shoulder surfing

• Tailgating

• SQL injection

What is the main purpose of a digital signature?

• To encrypt data

• To authenticate the sender

• To prevent data tampering

• To exchange encryption keys