ALABAMA CYBERSECURITY CERTIFICATION
EXAM QUESTIONS AND CORRECT DETAILED
ANSWERS
1. Which security principle requires that users receive only
the permissions necessary to perform their assigned duties?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Fail-safe defaults
Correct Answer: B. Least privilege
Rationale: Least privilege limits users and processes to the
minimum permissions required to complete authorized tasks,
reducing the potential impact of misuse or compromise.
2. Which component of the CIA triad ensures that
information is accessible to authorized users when needed?
A. Confidentiality
, B. Integrity
C. Availability
D. Authentication
Correct Answer: C. Availability
Rationale: Availability ensures that systems and information
remain accessible and usable by authorized users when
required.
3. What does confidentiality primarily protect against?
A. Unauthorized disclosure
B. Unauthorized modification
C. System downtime
D. Hardware failure
Correct Answer: A. Unauthorized disclosure
Rationale: Confidentiality protects sensitive information
from being disclosed to unauthorized individuals or systems.
4. Which CIA triad component protects information from
unauthorized alteration?
, A. Availability
B. Integrity
C. Confidentiality
D. Authentication
Correct Answer: B. Integrity
Rationale: Integrity ensures that information remains
accurate, complete, and protected against unauthorized
modification.
5. What is the primary purpose of multifactor authentication?
A. Increase network bandwidth
B. Require multiple independent authentication factors
C. Encrypt all stored files
D. Eliminate passwords entirely
Correct Answer: B. Require multiple independent
authentication factors
Rationale: Multifactor authentication combines two or more
different factor types, such as something you know, have, or
are.
, 6. Which is an example of something you know?
A. Fingerprint
B. Smart card
C. Password
D. Security token
Correct Answer: C. Password
Rationale: A password is knowledge-based authentication
because it is information the user knows.
7. Which is an example of something you have?
A. Password
B. Fingerprint
C. Hardware security token
D. PIN
Correct Answer: C. Hardware security token
Rationale: A physical security token is possession-based
authentication because the user must possess the device.
EXAM QUESTIONS AND CORRECT DETAILED
ANSWERS
1. Which security principle requires that users receive only
the permissions necessary to perform their assigned duties?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Fail-safe defaults
Correct Answer: B. Least privilege
Rationale: Least privilege limits users and processes to the
minimum permissions required to complete authorized tasks,
reducing the potential impact of misuse or compromise.
2. Which component of the CIA triad ensures that
information is accessible to authorized users when needed?
A. Confidentiality
, B. Integrity
C. Availability
D. Authentication
Correct Answer: C. Availability
Rationale: Availability ensures that systems and information
remain accessible and usable by authorized users when
required.
3. What does confidentiality primarily protect against?
A. Unauthorized disclosure
B. Unauthorized modification
C. System downtime
D. Hardware failure
Correct Answer: A. Unauthorized disclosure
Rationale: Confidentiality protects sensitive information
from being disclosed to unauthorized individuals or systems.
4. Which CIA triad component protects information from
unauthorized alteration?
, A. Availability
B. Integrity
C. Confidentiality
D. Authentication
Correct Answer: B. Integrity
Rationale: Integrity ensures that information remains
accurate, complete, and protected against unauthorized
modification.
5. What is the primary purpose of multifactor authentication?
A. Increase network bandwidth
B. Require multiple independent authentication factors
C. Encrypt all stored files
D. Eliminate passwords entirely
Correct Answer: B. Require multiple independent
authentication factors
Rationale: Multifactor authentication combines two or more
different factor types, such as something you know, have, or
are.
, 6. Which is an example of something you know?
A. Fingerprint
B. Smart card
C. Password
D. Security token
Correct Answer: C. Password
Rationale: A password is knowledge-based authentication
because it is information the user knows.
7. Which is an example of something you have?
A. Password
B. Fingerprint
C. Hardware security token
D. PIN
Correct Answer: C. Hardware security token
Rationale: A physical security token is possession-based
authentication because the user must possess the device.
