Practice Examination
Original Practice Questions
with Verified Answers and
Detailed Rationales
1. A security administrator is asked to ensure that only
authorized employees can access confidential payroll
information. Which security principle is MOST directly involved?
A. Availability
B. Integrity
C. Confidentiality
D. Non-repudiation
,Answer: C. Confidentiality
Confidentiality prevents unauthorized disclosure of information.
Payroll records contain sensitive information, so access should
be restricted to authorized personnel. Integrity protects against
unauthorized modification, while availability focuses on reliable
access.
2. A company uses checksums to determine whether a
downloaded software package was altered during transmission.
Which security objective is being addressed?
A. Confidentiality
B. Integrity
C. Availability
D. Authentication
Answer: B. Integrity
Integrity ensures that information has not been improperly
modified. A checksum or cryptographic hash can help verify
whether a file changed after its original hash was generated.
,3. Which security concept requires a user to prove who they are
before accessing a system?
A. Authorization
B. Accounting
C. Authentication
D. Federation
Answer: C. Authentication
Authentication verifies identity. Authorization determines what
an authenticated identity is allowed to do. Accounting records
activity for auditing and accountability.
4. A user successfully authenticates but cannot open a
restricted financial database. What process is MOST likely
preventing access?
A. Authentication
B. Authorization
, C. Identification
D. Hashing
Answer: B. Authorization
The user has already established their identity. Authorization
determines whether that identity has permission to access the
requested resource.
5. Which principle gives users only the permissions required to
perform their assigned responsibilities?
A. Open access
B. Least privilege
C. Job rotation
D. Mandatory vacation
Answer: B. Least privilege
Least privilege limits permissions to the minimum necessary for
a user's job. This reduces the potential impact of compromised
accounts and accidental misuse.