CCST Cybersecurity CIA Triad Fundamentals

1. What does confidentiality protect against in the CIA Triad?

Unauthorized access to sensitive data

Data modification

System downtime

User identification

2. Defense in depth involves using multiple layers of security controls.

True

False

Submit

4. Which of the following is NOT part of the CIA Triad?

Confidentiality

Integrity

Authentication

Availability

5. A vulnerability is a weakness that could be exploited by a threat actor.

True

False

6. What is the primary purpose of a firewall in network security?

To encrypt all traffic

To filter and control network traffic

To provide authentication

To back up data

7. Multi-factor authentication enhances security by requiring multiple forms of verification.

True

False

8. Which control type is used to prevent unauthorized access to sensitive data?

Preventive

Detective

Corrective

Compensating

Submit

10. A digital signature primarily protects which CIA Triad component?

Confidentiality

Integrity and non-repudiation

Availability

Authentication only

11. What is the primary goal of encryption in cybersecurity?

To prevent data modification

To protect confidentiality of data

To ensure system availability

To authenticate users

12. Which of the following is an example of a threat to confidentiality?

A hacker intercepting unencrypted passwords

A user accidentally deleting a file

A server going offline

A firewall blocking legitimate traffic

13. Availability in cybersecurity means systems and data are accessible when needed by authorized users.

True

False

14. A DDoS attack primarily threatens which aspect of the CIA Triad?

Confidentiality

Integrity

Availability

Non-repudiation

15. Which security principle ensures that users can only access resources they are authorized to use?

Principle of least privilege

Defense in depth

Zero trust

Security by design

16. A backup and disaster recovery plan primarily protects which CIA component?

Confidentiality

Integrity

Availability

All equally

Submit

18. Which component of the CIA Triad ensures that data cannot be modified by unauthorized parties?

Confidentiality

Integrity

Availability

Authentication

19. Which of the following best describes a zero-day vulnerability?

A vulnerability known for zero days

A newly discovered vulnerability with no available patch

A vulnerability that affects zero systems

A vulnerability lasting zero seconds

20. Access control lists (ACLs) are used to enforce which CIA Triad principle?

Confidentiality

Integrity

Availability

Encryption

CCST Cybersecurity Basic Security Concepts CIA Triad Quiz

1. What does confidentiality protect against in the CIA Triad?

2.

What first name or nickname would you like us to use?

2. Defense in depth involves using multiple layers of security controls.

3. Risk is the combination of threat and ______ in a security context.

4. Which of the following is NOT part of the CIA Triad?

5. A vulnerability is a weakness that could be exploited by a threat actor.

6. What is the primary purpose of a firewall in network security?

7. Multi-factor authentication enhances security by requiring multiple forms of verification.

8. Which control type is used to prevent unauthorized access to sensitive data?

9. Malware that corrupts files violates the ______ principle of the CIA Triad.

10. A digital signature primarily protects which CIA Triad component?

11. What is the primary goal of encryption in cybersecurity?

12. Which of the following is an example of a threat to confidentiality?

13. Availability in cybersecurity means systems and data are accessible when needed by authorized users.

14. A DDoS attack primarily threatens which aspect of the CIA Triad?

15. Which security principle ensures that users can only access resources they are authorized to use?

16. A backup and disaster recovery plan primarily protects which CIA component?

17. Phishing attacks are primarily designed to compromise user ______ and passwords.

18. Which component of the CIA Triad ensures that data cannot be modified by unauthorized parties?

19. Which of the following best describes a zero-day vulnerability?

20. Access control lists (ACLs) are used to enforce which CIA Triad principle?