SECURITY EXAM PREPARATION REVIEW
2026 CORE TOPICS QUESTIONS AND
SOLUTIONS
◉ A university research group wants to collect data on animals that
are native to southern Arizona, which is a hot, dry region. They plan
to camp in tents for the summer at the edge of a national park and to
use optical media to backup photos and research notes.
Which physical or environmental factor may damage their optical
media?
A Humidity
B Temperature
C Magnetic fields
D Electric shocks
Answer: B
◉ In the system room of a small company, an emergency power
shut-down switch was installed right next to a light switch. As a
result, employees sometimes shut down the power accidentally
when they leave the data center.
,Which type of control should be implemented to mitigate the risk of
accidental shut down?
A Physical
B Administrative
C Logical
D Technical
Answer: A
◉ A company developing and distributing open source applications
realizes that attackers are copying the publicly available, open
source code and inserting malware into the code.
Which type of cryptographic tool should the company use to protect
the integrity of its open source applications?
A Symmetric cryptography
B Hash functions
C Block cipher
D Asymmetric cryptography
Answer: B
,◉ After considerable research, attackers directed a spear phishing
attack at employees at a single bank. One employee opened a
message, resulting in a breach that delivered ransomware.
Which type of control should be implemented to prevent future
spear phishing attacks?
A Mutual authentication
B Strong passwords
C Employee training
D Input validation
Answer: C
◉ A company has instituted a policy to prevent data leakage. The
policy requires that any data stored on USB storage devices must be
encrypted with at least 256-bit encryption.
Which principle that is part of the Parkerian hexad but not the CIA
triad would be violated if one of these devices was stolen?
A Confidentiality
B Integrity
C Possession
, D Authenticity
Answer: C
◉ A company is concerned about potential phishing attacks through
email. As a result, a new company policy dictates that all email must
be digitally signed before it is sent to any customers or partners.
Which security principle that is part of Parkerian hexad but not part
of the CIA triad is precipitating this policy change?
A Confidentiality
B Authenticity
C Control
D Utility
Answer: B
◉ Which two principles of the CIA triad can be violated by a
fabrication attack?
A Integrity and authenticity
B Integrity and availability
C Confidentiality and integrity
D Confidentiality and availability
2026 CORE TOPICS QUESTIONS AND
SOLUTIONS
◉ A university research group wants to collect data on animals that
are native to southern Arizona, which is a hot, dry region. They plan
to camp in tents for the summer at the edge of a national park and to
use optical media to backup photos and research notes.
Which physical or environmental factor may damage their optical
media?
A Humidity
B Temperature
C Magnetic fields
D Electric shocks
Answer: B
◉ In the system room of a small company, an emergency power
shut-down switch was installed right next to a light switch. As a
result, employees sometimes shut down the power accidentally
when they leave the data center.
,Which type of control should be implemented to mitigate the risk of
accidental shut down?
A Physical
B Administrative
C Logical
D Technical
Answer: A
◉ A company developing and distributing open source applications
realizes that attackers are copying the publicly available, open
source code and inserting malware into the code.
Which type of cryptographic tool should the company use to protect
the integrity of its open source applications?
A Symmetric cryptography
B Hash functions
C Block cipher
D Asymmetric cryptography
Answer: B
,◉ After considerable research, attackers directed a spear phishing
attack at employees at a single bank. One employee opened a
message, resulting in a breach that delivered ransomware.
Which type of control should be implemented to prevent future
spear phishing attacks?
A Mutual authentication
B Strong passwords
C Employee training
D Input validation
Answer: C
◉ A company has instituted a policy to prevent data leakage. The
policy requires that any data stored on USB storage devices must be
encrypted with at least 256-bit encryption.
Which principle that is part of the Parkerian hexad but not the CIA
triad would be violated if one of these devices was stolen?
A Confidentiality
B Integrity
C Possession
, D Authenticity
Answer: C
◉ A company is concerned about potential phishing attacks through
email. As a result, a new company policy dictates that all email must
be digitally signed before it is sent to any customers or partners.
Which security principle that is part of Parkerian hexad but not part
of the CIA triad is precipitating this policy change?
A Confidentiality
B Authenticity
C Control
D Utility
Answer: B
◉ Which two principles of the CIA triad can be violated by a
fabrication attack?
A Integrity and authenticity
B Integrity and availability
C Confidentiality and integrity
D Confidentiality and availability
