Information Security Quiz 2

Which of the following is NOT a component of the CIA triad in Information Security?

• Confidentiality

• Availability

• Integrity

• Authorization

Which of the following tools is primarily used to ensure confidentiality?

• Encryption

• Hashing

• Backups

• Digital signatures

Which type of attack directly impacts the availability of a system?

• Phishing

• DDoS

• Ransomware

• Man-in-the-middle

What is the primary goal of an Advanced Persistent Threat (APT)?

• Corrupt data to affect integrity

• Disrupt service availability

• Steal sensitive data over time without detection

• Lock users out of their systems until a ransom is paid

Which of the following is an example of protecting data integrity?

• Using multi-factor authentication

• Encrypting sensitive documents

• Running regular backups

• Applying checksums to verify data accuracy

Which cyber threat is characterized by an attacker pretending to be a trusted entity to trick individuals into revealing sensitive information?

• Malware

• Phishing

• DDoS

• Insider threat

In the context of the document, what does 'Availability' refer to?

• Ensuring that only authorized users can access data

• Ensuring that data is accurate and unaltered

• Ensuring that systems and data are accessible to authorized users when needed

• Ensuring that user credentials are secure

Which type of cyberattack involves intercepting and altering communication between two parties?

• Malware attack

• Denial of Service

• Man-in-the-middle attack

• Phishing

Which of the following best describes a ransomware attack?

• Stealing data by posing as a legitimate user

• Encrypting files and demanding payment for decryption

• Intercepting network communications

• Flooding a server with traffic to disrupt service

What is a common strategy to protect systems from insider threats?

• Digital signatures

• Employee training and monitoring

• Firewalls

• Encryption