IAS REVIEW

Which of the following is not part of the CIA triad in security objectives?

• Confidentiality
• Integrity
• Accessibility
• Availability

What is the primary purpose of security objectives?

• To provide encryption methods
• To define security attacks
• To ensure the confidentiality, integrity, and availability of data
• To manage network traffic

What does confidentiality ensure in terms of data?

• Data is encrypted at all times
• Information is not disclosed to unauthorized entities
• Only specific files are available to users
• Systems perform their intended functions

Which term refers to ensuring that data is only changed in an authorized manner?

• Data integrity
• System integrity
• Data authenticity
• Nonrepudiation

What does system integrity ensure?

• Data is encrypted before transmission
• The system performs its intended function without unauthorized interference
• Users are authenticated before accessing the system
• Messages are received as sent

Which of the following describes availability in the context of security?

• Ensures data is not modified
• Prevents unauthorized disclosure of information
• Ensures that systems work promptly and services are not denied to authorized users
• Traces all system actions to a responsible entity

What is authenticity concerned with in a security system?

• Data confidentiality
• Verifying that users are who they claim to be
• Detecting passive attacks
• System accessibility

Accountability supports all of the following except:

• Intrusion detection
• Nonrepudiation
• Fault isolation
• Data encryption

Which of the following attacks involves eavesdropping on communications?

• Replay attack
• Passive attack
• Denial-of-service
• Masquerade

What is the goal of a passive attack?

• To prevent access to a service
• To modify the contents of a message
• To obtain transmitted information without altering it
• To block network access