The principle of confidentiality ensures that sensitive information is accessed only by authorized individuals, preventing disclosure to unauthorized entities.
Missing Word
confidentiality
Confidentiality is the protection of information from unauthorized disclosure.
Question 2
Data integrity is crucial for ensuring that information remains accurate and complete, and has not been altered without authorization.
Missing Word
integrity
Integrity guarantees that data has not been tampered with and remains accurate.
Question 3
The principle of availability ensures that systems and data are accessible to authorized users when needed, preventing denial of service.
Missing Word
availability
Availability ensures that authorized users can access resources and information when required.
Question 4
Before granting access to a system, the process of authentication verifies the identity of a user or device.
Missing Word
authentication
Authentication is the process of confirming a user's claimed identity.
Question 5
Using fingerprints or facial recognition for identity verification is an example of biometrics as an authentication factor.
Missing Word
biometrics
Biometrics uses unique biological characteristics for identification.
Question 6
Implementing multi-factor authentication requires users to provide two or more different types of credentials to prove their identity, significantly increasing security.
Missing Word
multi-factor
Multi-factor authentication combines multiple independent credentials to verify identity.
Question 7
In symmetric encryption, the same secret key is used for both encrypting plaintext and decrypting ciphertext.
Missing Word
symmetric
Symmetric encryption uses a single shared key for both encryption and decryption.
Question 8
Public key infrastructure relies on asymmetric encryption, where a public key encrypts data and a corresponding private key decrypts it.
Missing Word
asymmetric
Asymmetric encryption uses a pair of keys, one public and one private, for encryption and decryption.
Question 9
The original, readable message before any encryption is applied is known as plaintext.
Missing Word
plaintext
Plaintext is the unencrypted form of data.
Question 10
After encryption, the scrambled and unreadable data is referred to as ciphertext.
Missing Word
ciphertext
Ciphertext is the encrypted form of data, unreadable without the correct key.
Question 11
An attacker attempts to trick a user into revealing credentials by impersonating a trustworthy entity in a fraudulent email, a tactic known as phishing.
Missing Word
phishing
Phishing is a social engineering technique used to acquire sensitive information by masquerading as a trustworthy entity.
Question 12
A DDoS attack overwhelms a target system with a flood of traffic from multiple compromised sources, making it unavailable to legitimate users.
Missing Word
DDoS
A DDoS (Distributed Denial of Service) attack aims to make a service unavailable by flooding it with traffic from many sources.
Question 13
A type of malicious software that encrypts a victim's files and demands a payment, often in cryptocurrency, to restore access is known as ransomware.
Missing Word
ransomware
Ransomware encrypts data and demands payment for its release.
Question 14
Unlike a virus, a worm is a standalone malicious program that can self-replicate and spread across computer networks without requiring human interaction.
Missing Word
worm
A worm is self-replicating malware that spreads independently across networks.
Question 15
A malicious program disguised as legitimate software, which performs unwanted actions when executed, is commonly referred to as a Trojan.
Missing Word
Trojan
A Trojan horse is malware that appears legitimate but carries out malicious activities.
Question 16
Designed to secretly observe and record user activity without their knowledge, spyware can capture sensitive information like keystrokes and browsing history.
Missing Word
spyware
Spyware secretly monitors and collects information about a user's activities.
Question 17
A firewall acts as a barrier between a trusted internal network and untrusted external networks, controlling incoming and outgoing traffic based on security rules.
Missing Word
firewall
A firewall is a network security system that monitors and controls network traffic based on predefined security rules.
Question 18
An IDS monitors network traffic for suspicious activity and alerts administrators to potential threats, but does not actively block them.
Missing Word
IDS
An IDS (Intrusion Detection System) detects malicious activities or policy violations and reports them.
Question 19
To create a secure, encrypted connection over an unsecured network like the internet, users often employ a VPN.
Missing Word
VPN
A VPN (Virtual Private Network) creates a secure, encrypted tunnel for data transmission over a public network.