ISC2 - Domain 1- Security Principles

The concept of "secrecy" is most related to which foundational aspect of security?

• Availability

• Confidentiality

• Integrity

• Plausibility

Which region enacted comprehensive legislation addressing personal privacy in 2016?

• Africa

• Asia-Pacific

• European Union

• United States

What is the purpose of implementing security controls in the risk management process?

• To eliminate all vulnerabilities

• To ensure that a cyberattack would be impossible

• To increase the level of risk

• To mitigate the risk to an acceptable level

If a pickpocket is a threat, what would be their attack vector?

• The crowded tourist spot

• Their technique and approach

• The stolen goods

• Tourists

How do companies that offer identity theft insurance manage their own financial risk?

• By always honoring payout commitments

• By calculating premium payments against potential payouts

• By charging low premiums

• By restricting the number of claims

What term is used to refer to information that, when combined with other pieces of data, significantly narrows the possibility of association with more individuals?

• Limited Access Data (LAD)

• Personal Identification Element (PIE)

• Personally Identifiable Information (PII)

• PII Fusion

What potential risk can occur when a remote worker's laptop is left unattended or unlocked?

• Accidental introduction of unauthorized software with malware

• Corrupt workstation due to power outage

• Loss of internet connection

• Mechanical failure of backup generators

In the United States, which act governs the privacy of medical information?

• FERPA

• GDPR

• HIPAA

• HITECH

What is an "asset" in the context of risk management terminology?

• Actionable information

• A gap or weakness in protection efforts

• Something in need of protection

• Something or someone that aims to exploit a vulnerability

Who is responsible for determining risk tolerance in an organization?

• All employees

• Executive management and board of directors

• External consultants

• The risk management team