In a corporate office, employees are required to use their access cards to enter different
sections of the building. What type of control is being implemented in this scenario?
Detective control
Preventive control
Physical control
Corrective control - ANSWER Physical control
- The use of access cards to enter different sections of the building is an example of physical
control, as it restricts and controls physical access to specific areas.
Detective controls - ANSWER Help to identify and respond to security incidents after
they have occurred.
- ex. security cameras
Preventive controls - ANSWER Aim to stop security incidents before they occur.
Corrective controls - ANSWER Implemented in response to identified security
incidents.
A financial institution implements encryption for all sensitive data transmitted between its
branches to ensure confidentiality. What type of control is being applied here?
Technical control
Administrative control
1
,Physical control
Operational control - ANSWER Technical control
- Encryption is a technical control that involves the use of technology to protect sensitive
data during transmission, ensuring its confidentiality.
Administrative controls - ANSWER involve policies, procedures, and training to shape
behavior.
Physical controls - ANSWER Restrict access to physical areas and assets.
Operational control - ANSWER Focus on day-to-day processes and procedures to
ensure the security of information systems.
A company encrypts sensitive customer data to prevent unauthorized access. What security
principle does this primarily address?
Confidentiality
Integrity
Availability
Accountability - ANSWER Confidentiality
- Encrypting sensitive customer data helps maintain confidentiality by protecting it from
unauthorized access.
Integrity - ANSWER Ensures that data remains accurate and unaltered.
Availability - ANSWER Focuses on ensuring that resources are accessible when
needed.
Accountability - ANSWER Is about tracking actions and identifying responsible parties.
2
,A system administrator implements regular backups to ensure that critical data can be
restored in the event of a hardware failure. Which security principle does this align with?
Confidentiality
Integrity
Availability
Non-repudiation - ANSWER Availability
- Regular backups contribute to the ability of critical data by ensuring it can be stores in case
of a hardware failure or data loss.
Confidentiality - ANSWER Is about preventing unauthorized access to sensitive
information.
Non-repudiation - ANSWER Focuses on ensuring that a party cannot deny its actions.
A security mechanism is implemented to verify that data remains unchanged during
transmission over a network. Which security principle is being emphasized?
Confidentiality
Integrity
Availability
Authentication - ANSWER Integrity
- Verifying data integrity ensures that it remains unchanged during transmission, guarding
against unauthorized alterations.
In a network environment, what AAA component is responsible for tracking the activities of
users and monitoring resource usage?
3
, Authentication
Authorization
Accounting
Auditing - ANSWER Accounting
- Involves tracking user activities and resource usage for the purpose of billing, auditing, and
security monitoring.
Auditing - ANSWER Involves the analysis of logs and records to ensure compliance and
detect security incidents.
Authorization - ANSWER Determines the user's access rights and permissions after
successful authentication.
Authentication - ANSWER Involves verifying the identity of a user.
In a multi-factor authentication system, which of the following is an example of something
you know?
Fingerprint scan
One-time password
Smart card
Retina scan - ANSWER One-time password
- Something you know refers to knowledge-based factors, such as a password or PIN, and a
one-time password is an example of this.
Something you are - ANSWER A biometric factor
- ex. fingerprint scan, retina scan
Something you have - ANSWER A possession-based factor
4
sections of the building. What type of control is being implemented in this scenario?
Detective control
Preventive control
Physical control
Corrective control - ANSWER Physical control
- The use of access cards to enter different sections of the building is an example of physical
control, as it restricts and controls physical access to specific areas.
Detective controls - ANSWER Help to identify and respond to security incidents after
they have occurred.
- ex. security cameras
Preventive controls - ANSWER Aim to stop security incidents before they occur.
Corrective controls - ANSWER Implemented in response to identified security
incidents.
A financial institution implements encryption for all sensitive data transmitted between its
branches to ensure confidentiality. What type of control is being applied here?
Technical control
Administrative control
1
,Physical control
Operational control - ANSWER Technical control
- Encryption is a technical control that involves the use of technology to protect sensitive
data during transmission, ensuring its confidentiality.
Administrative controls - ANSWER involve policies, procedures, and training to shape
behavior.
Physical controls - ANSWER Restrict access to physical areas and assets.
Operational control - ANSWER Focus on day-to-day processes and procedures to
ensure the security of information systems.
A company encrypts sensitive customer data to prevent unauthorized access. What security
principle does this primarily address?
Confidentiality
Integrity
Availability
Accountability - ANSWER Confidentiality
- Encrypting sensitive customer data helps maintain confidentiality by protecting it from
unauthorized access.
Integrity - ANSWER Ensures that data remains accurate and unaltered.
Availability - ANSWER Focuses on ensuring that resources are accessible when
needed.
Accountability - ANSWER Is about tracking actions and identifying responsible parties.
2
,A system administrator implements regular backups to ensure that critical data can be
restored in the event of a hardware failure. Which security principle does this align with?
Confidentiality
Integrity
Availability
Non-repudiation - ANSWER Availability
- Regular backups contribute to the ability of critical data by ensuring it can be stores in case
of a hardware failure or data loss.
Confidentiality - ANSWER Is about preventing unauthorized access to sensitive
information.
Non-repudiation - ANSWER Focuses on ensuring that a party cannot deny its actions.
A security mechanism is implemented to verify that data remains unchanged during
transmission over a network. Which security principle is being emphasized?
Confidentiality
Integrity
Availability
Authentication - ANSWER Integrity
- Verifying data integrity ensures that it remains unchanged during transmission, guarding
against unauthorized alterations.
In a network environment, what AAA component is responsible for tracking the activities of
users and monitoring resource usage?
3
, Authentication
Authorization
Accounting
Auditing - ANSWER Accounting
- Involves tracking user activities and resource usage for the purpose of billing, auditing, and
security monitoring.
Auditing - ANSWER Involves the analysis of logs and records to ensure compliance and
detect security incidents.
Authorization - ANSWER Determines the user's access rights and permissions after
successful authentication.
Authentication - ANSWER Involves verifying the identity of a user.
In a multi-factor authentication system, which of the following is an example of something
you know?
Fingerprint scan
One-time password
Smart card
Retina scan - ANSWER One-time password
- Something you know refers to knowledge-based factors, such as a password or PIN, and a
one-time password is an example of this.
Something you are - ANSWER A biometric factor
- ex. fingerprint scan, retina scan
Something you have - ANSWER A possession-based factor
4
