250 Practice Questions & Answers | Latest Exam Prep
Study Guide | CIA Triad, Risk Management, Cryptography
& Network Security
Section 1 — Core Security Concepts: CIA Triad & Security Principles
1. Which CIA triad principle ensures that information is accessible only to authorized
individuals?
A. Integrity
B. Availability
C. Confidentiality
D. Authenticity
Answer: C. Confidentiality
Confidentiality prevents unauthorized disclosure or access to information.
2. A company uses checksums to detect unauthorized changes to files. Which
security principle is primarily being protected?
A. Availability
B. Integrity
,C. Confidentiality
D. Utility
Answer: B. Integrity
Integrity ensures information remains accurate, complete, and protected from unauthorized
modification.
3. A hospital installs redundant servers so its electronic medical-record system
remains operational during a hardware failure. Which CIA principle is addressed?
A. Confidentiality
B. Integrity
C. Availability
D. Authenticity
Answer: C. Availability
Availability means authorized users can access systems and information when needed.
4. An employee sends confidential customer information to an unauthorized
recipient. Which CIA principle was violated?
A. Availability
B. Confidentiality
C. Integrity
D. Utility
Answer: B. Confidentiality
Unauthorized disclosure exposes information to someone who should not have access to it.
,5. An attacker changes the amount of a financial transaction from $100 to $10,000.
Which principle is primarily affected?
A. Confidentiality
B. Availability
C. Integrity
D. Possession
Answer: C. Integrity
Changing valid information without authorization compromises its accuracy and integrity.
6. A distributed denial-of-service attack prevents customers from accessing a
company's website. Which principle is most directly affected?
A. Availability
B. Confidentiality
C. Integrity
D. Authenticity
Answer: A. Availability
DDoS attacks attempt to make services unavailable to legitimate users.
7. Which security principle is concerned with proving that information or an entity is
genuine?
A. Authenticity
B. Availability
, C. Possession
D. Utility
Answer: A. Authenticity
Authenticity establishes that something is genuine or comes from the claimed source.
8. Which concept describes maintaining control or ownership of information even
when the information itself has not been changed?
A. Possession/control
B. Confidentiality
C. Integrity
D. Availability
Answer: A. Possession/control
Possession or control concerns who has physical or logical control of information.
9. A company encrypts a stolen laptop's hard drive. Which security objective is most
directly supported?
A. Confidentiality
B. Availability
C. Non-repudiation
D. Utility
Answer: A. Confidentiality
Encryption prevents unauthorized parties from reading protected information.