Fundamentals of Information Security
and Cryptography Exam 2025 Questions
and Answers 100% Pass
Confidentiality - ANSWER-only those with access can access information
Integrity - ANSWER-ensuring that information and processing are complete and
accurate
Availability - ANSWER-ensuring that data is constantly accessible to authorised
users
Anonymity - ANSWER-hide a user's identity during communication or data usage
Untraceability - ANSWER-prevent tracking of user actions over time
Pseudonymity - ANSWER-use fake identifiers instead of real identities
Unlinkability - ANSWER-ensure that actions cannot be linked to each other or to
a user
Copy protection - ANSWER-prevents unauthorised duplication of digital content
Information flow control - ANSWER-restrict how data moves within a system
(prevent leaks)
COPYRIGHT ©️ 2025 ALL RIGHTS RESERVED...TRUSTED & VERIFIED 1
,Data protection/personal data privacy - ANSWER-safeguard personal info from
misuse or unauthorized access
Rollback - ANSWER-restore a system to a previous working state after failure or
corruption
Authenticity - ANSWER-confirm that data, communications, or identities are
genuine and haven't been tampered with
Non-repudation - ANSWER-prevents parties from denying their actions, ensuring
accountability
Audit - ANSWER-tracks and logs system activities to detect unauthorised changes
and support recovery or forensic analysis
Policy - ANSWER-what's meant to be achieved
Mechanism - ANSWER-what's assembled to implement a policy
Assurance - ANSWER-confidence in system's abilities
Incentive - ANSWER-motive for people or attackers to protect or attack a policy
Simplicity - ANSWER-keeping the design as simple and small as possible
Open design - ANSWER-design should be non-secret (public)
Compartmentalisation - ANSWER-organise resources into isolated groups or
similar needs
COPYRIGHT ©️ 2025 ALL RIGHTS RESERVED...TRUSTED & VERIFIED 2
, Least Privilege - ANSWER-every program & privileged user of the system should
operate with the least privilege necessary
Trust vs. Trustworthiness - ANSWER-Trust: system may misbehave and not meet
the user's expectations; Trustworthiness: system satisfies user's expectations
Fail-safe defaults - ANSWER-system should begin in and return to a secure default
state upon failure
Complete mediation - ANSWER-every access to every object must be checked for
authority
No single point of failure - ANSWER-Redundant security mechanisms
Usability - ANSWER-security mechanisms that are easy to use
Vulnerability - ANSWER-weakness (hole in the roof)
Threat - ANSWER-potential for a vulnerability to be exploited (storm)
Attack - ANSWER-when a threat exploits a vulnerability
Controls - ANSWER-defences - block threats, fix vulnerabilities, and detect
breaches
Vulnerability analysis - ANSWER-Look for holes that could be exploited through
scanning systems to identify missing patches, misconfigured settings, programming
mistakes, etc.
COPYRIGHT ©️ 2025 ALL RIGHTS RESERVED...TRUSTED & VERIFIED 3
and Cryptography Exam 2025 Questions
and Answers 100% Pass
Confidentiality - ANSWER-only those with access can access information
Integrity - ANSWER-ensuring that information and processing are complete and
accurate
Availability - ANSWER-ensuring that data is constantly accessible to authorised
users
Anonymity - ANSWER-hide a user's identity during communication or data usage
Untraceability - ANSWER-prevent tracking of user actions over time
Pseudonymity - ANSWER-use fake identifiers instead of real identities
Unlinkability - ANSWER-ensure that actions cannot be linked to each other or to
a user
Copy protection - ANSWER-prevents unauthorised duplication of digital content
Information flow control - ANSWER-restrict how data moves within a system
(prevent leaks)
COPYRIGHT ©️ 2025 ALL RIGHTS RESERVED...TRUSTED & VERIFIED 1
,Data protection/personal data privacy - ANSWER-safeguard personal info from
misuse or unauthorized access
Rollback - ANSWER-restore a system to a previous working state after failure or
corruption
Authenticity - ANSWER-confirm that data, communications, or identities are
genuine and haven't been tampered with
Non-repudation - ANSWER-prevents parties from denying their actions, ensuring
accountability
Audit - ANSWER-tracks and logs system activities to detect unauthorised changes
and support recovery or forensic analysis
Policy - ANSWER-what's meant to be achieved
Mechanism - ANSWER-what's assembled to implement a policy
Assurance - ANSWER-confidence in system's abilities
Incentive - ANSWER-motive for people or attackers to protect or attack a policy
Simplicity - ANSWER-keeping the design as simple and small as possible
Open design - ANSWER-design should be non-secret (public)
Compartmentalisation - ANSWER-organise resources into isolated groups or
similar needs
COPYRIGHT ©️ 2025 ALL RIGHTS RESERVED...TRUSTED & VERIFIED 2
, Least Privilege - ANSWER-every program & privileged user of the system should
operate with the least privilege necessary
Trust vs. Trustworthiness - ANSWER-Trust: system may misbehave and not meet
the user's expectations; Trustworthiness: system satisfies user's expectations
Fail-safe defaults - ANSWER-system should begin in and return to a secure default
state upon failure
Complete mediation - ANSWER-every access to every object must be checked for
authority
No single point of failure - ANSWER-Redundant security mechanisms
Usability - ANSWER-security mechanisms that are easy to use
Vulnerability - ANSWER-weakness (hole in the roof)
Threat - ANSWER-potential for a vulnerability to be exploited (storm)
Attack - ANSWER-when a threat exploits a vulnerability
Controls - ANSWER-defences - block threats, fix vulnerabilities, and detect
breaches
Vulnerability analysis - ANSWER-Look for holes that could be exploited through
scanning systems to identify missing patches, misconfigured settings, programming
mistakes, etc.
COPYRIGHT ©️ 2025 ALL RIGHTS RESERVED...TRUSTED & VERIFIED 3
