Security+ SY0-601 Chapter 1 Review Questions With Correct Answers Graded A+

What are the three components of the CIA triad? - Confidentiality, Integrity, Availability Why might a CCTV camera be situated outside a building without any film inside? - To make potential assailants think that they are being watched What does confidentiality mean? - Prevent the exposure of data to unauthorized individuals and only allow authorized individual to access the data How can we control access of personnel to a data center? - Man traps only allow one person at a time. Data centers can also use key cards, electronic locks, tokens and biometric locks What is the purpose of an air gap? - An air gap completely isolates a computer from the network. This is often used by an R&D department to prevent theft of proprietary technology. Name three main control categories. - Managerial, operational, technical Name three physical controls. - Perimeter security, building security, fences, guards, locks Following an incident, what type of control will be used when researching how the incident happened? - Corrective controls How do I know whether the integrity of my data is intact? - Hashing is a technique that takes the data and converts it into a unique value. If the data is changed in any way the hashing value will also be changed. What is a corrective control? - Corrective controls are the actions you take to recover from an incident.What type of control is it when you change the firewall rules? - Technical controls What is used to log in to a system that works in conjunction with a PIN? - Smart Card What is the name of the person who looks after classified data and who is the person that gives people access to the classified data? - Security Administrator When you use a DAC model for access, who determines who gains access to the data? - Data Creator/ Owner What is least privilege? - Giving a user the least amount of access that they need in order to perform their role.