Fundamentals of Information Security and
Cryptography UPDATED ACTUAL Exam
Questions and CORRECT Answers
Confidentiality - CORRECT ANSWER only those with access can access information
Integrity - CORRECT ANSWER ensuring that information and processing are complete and
accurate
Availability - CORRECT ANSWER ensuring that data is constantly accessible to authorised
users
Anonymity - CORRECT ANSWER hide a user's identity during communication or data usage
Untraceability - CORRECT ANSWER prevent tracking of user actions over time
Pseudonymity - CORRECT ANSWER use fake identifiers instead of real identities
Unlinkability - CORRECT ANSWER ensure that actions cannot be linked to each other or to
a user
Copy protection - CORRECT ANSWER prevents unauthorised duplication of digital content
Information flow control - CORRECT ANSWER restrict how data moves within a system
(prevent leaks)
Data protection/personal data privacy - CORRECT ANSWER safeguard personal info from
misuse or unauthorized access
,Rollback - CORRECT ANSWER restore a system to a previous working state after failure or
corruption
Authenticity - CORRECT ANSWER confirm that data, communications, or identities are
genuine and haven't been tampered with
Non-repudation - CORRECT ANSWER prevents parties from denying their actions, ensuring
accountability
Audit - CORRECT ANSWER tracks and logs system activities to detect unauthorised
changes and support recovery or forensic analysis
Policy - CORRECT ANSWER what's meant to be achieved
Mechanism - CORRECT ANSWER what's assembled to implement a policy
Assurance - CORRECT ANSWER confidence in system's abilities
Incentive - CORRECT ANSWER motive for people or attackers to protect or attack a policy
Simplicity - CORRECT ANSWER keeping the design as simple and small as possible
Open design - CORRECT ANSWER design should be non-secret (public)
Compartmentalisation - CORRECT ANSWER organise resources into isolated groups or
similar needs
Least Privilege - CORRECT ANSWER every program & privileged user of the system should
operate with the least privilege necessary
, Trust vs. Trustworthiness - CORRECT ANSWER Trust: system may misbehave and not meet
the user's expectations; Trustworthiness: system satisfies user's expectations
Fail-safe defaults - CORRECT ANSWER system should begin in and return to a secure
default state upon failure
Complete mediation - CORRECT ANSWER every access to every object must be checked for
authority
No single point of failure - CORRECT ANSWER Redundant security mechanisms
Usability - CORRECT ANSWER security mechanisms that are easy to use
Vulnerability - CORRECT ANSWER weakness (hole in the roof)
Threat - CORRECT ANSWER potential for a vulnerability to be exploited (storm)
Attack - CORRECT ANSWER when a threat exploits a vulnerability
Controls - CORRECT ANSWER defences - block threats, fix vulnerabilities, and detect
breaches
Vulnerability analysis - CORRECT ANSWER Look for holes that could be exploited through
scanning systems to identify missing patches, misconfigured settings, programming mistakes,
etc.
Threat modelling - CORRECT ANSWER Identify potential threats that could exploit
vulnerabilities, discovering who's likely to attack, how an attack could be successful, and all the
ways a structure can be attacked.
Cryptography UPDATED ACTUAL Exam
Questions and CORRECT Answers
Confidentiality - CORRECT ANSWER only those with access can access information
Integrity - CORRECT ANSWER ensuring that information and processing are complete and
accurate
Availability - CORRECT ANSWER ensuring that data is constantly accessible to authorised
users
Anonymity - CORRECT ANSWER hide a user's identity during communication or data usage
Untraceability - CORRECT ANSWER prevent tracking of user actions over time
Pseudonymity - CORRECT ANSWER use fake identifiers instead of real identities
Unlinkability - CORRECT ANSWER ensure that actions cannot be linked to each other or to
a user
Copy protection - CORRECT ANSWER prevents unauthorised duplication of digital content
Information flow control - CORRECT ANSWER restrict how data moves within a system
(prevent leaks)
Data protection/personal data privacy - CORRECT ANSWER safeguard personal info from
misuse or unauthorized access
,Rollback - CORRECT ANSWER restore a system to a previous working state after failure or
corruption
Authenticity - CORRECT ANSWER confirm that data, communications, or identities are
genuine and haven't been tampered with
Non-repudation - CORRECT ANSWER prevents parties from denying their actions, ensuring
accountability
Audit - CORRECT ANSWER tracks and logs system activities to detect unauthorised
changes and support recovery or forensic analysis
Policy - CORRECT ANSWER what's meant to be achieved
Mechanism - CORRECT ANSWER what's assembled to implement a policy
Assurance - CORRECT ANSWER confidence in system's abilities
Incentive - CORRECT ANSWER motive for people or attackers to protect or attack a policy
Simplicity - CORRECT ANSWER keeping the design as simple and small as possible
Open design - CORRECT ANSWER design should be non-secret (public)
Compartmentalisation - CORRECT ANSWER organise resources into isolated groups or
similar needs
Least Privilege - CORRECT ANSWER every program & privileged user of the system should
operate with the least privilege necessary
, Trust vs. Trustworthiness - CORRECT ANSWER Trust: system may misbehave and not meet
the user's expectations; Trustworthiness: system satisfies user's expectations
Fail-safe defaults - CORRECT ANSWER system should begin in and return to a secure
default state upon failure
Complete mediation - CORRECT ANSWER every access to every object must be checked for
authority
No single point of failure - CORRECT ANSWER Redundant security mechanisms
Usability - CORRECT ANSWER security mechanisms that are easy to use
Vulnerability - CORRECT ANSWER weakness (hole in the roof)
Threat - CORRECT ANSWER potential for a vulnerability to be exploited (storm)
Attack - CORRECT ANSWER when a threat exploits a vulnerability
Controls - CORRECT ANSWER defences - block threats, fix vulnerabilities, and detect
breaches
Vulnerability analysis - CORRECT ANSWER Look for holes that could be exploited through
scanning systems to identify missing patches, misconfigured settings, programming mistakes,
etc.
Threat modelling - CORRECT ANSWER Identify potential threats that could exploit
vulnerabilities, discovering who's likely to attack, how an attack could be successful, and all the
ways a structure can be attacked.
