CCST Cybersecurity CIA Triad Fundamentals

1. What does confidentiality protect against in the CIA Triad?

Unauthorized access to sensitive data

Data modification

System downtime

User identification

2. Defense in depth involves using multiple layers of security controls.

True

False

3. Which of the following is NOT part of the CIA Triad?

Confidentiality

Integrity

Authentication

Availability

4. A vulnerability is a weakness that could be exploited by a threat actor.

True

False

5. What is the primary purpose of a firewall in network security?

To encrypt all traffic

To filter and control network traffic

To provide authentication

To back up data

6. Multi-factor authentication enhances security by requiring multiple forms of verification.

True

False

7. Which control type is used to prevent unauthorized access to sensitive data?

Preventive

Detective

Corrective

Compensating

8. A digital signature primarily protects which CIA Triad component?

Confidentiality

Integrity and non-repudiation

Availability

Authentication only

9. What is the primary goal of encryption in cybersecurity?

To prevent data modification

To protect confidentiality of data

To ensure system availability

To authenticate users

10. Which of the following is an example of a threat to confidentiality?

A hacker intercepting unencrypted passwords

A user accidentally deleting a file

A server going offline

A firewall blocking legitimate traffic

11. Availability in cybersecurity means systems and data are accessible when needed by authorized users.

True

False

12. A DDoS attack primarily threatens which aspect of the CIA Triad?

Confidentiality

Integrity

Availability

Non-repudiation

13. Which security principle ensures that users can only access resources they are authorized to use?

Principle of least privilege

Defense in depth

Zero trust

Security by design

14. A backup and disaster recovery plan primarily protects which CIA component?

Confidentiality

Integrity

Availability

All equally

15. Which component of the CIA Triad ensures that data cannot be modified by unauthorized parties?

Confidentiality

Integrity

Availability

Authentication

16. Which of the following best describes a zero-day vulnerability?

A vulnerability known for zero days

A newly discovered vulnerability with no available patch

A vulnerability that affects zero systems

A vulnerability lasting zero seconds

17. Access control lists (ACLs) are used to enforce which CIA Triad principle?

Confidentiality

Integrity

Availability

Encryption

Submit

CCST Cybersecurity Basic Security Concepts CIA Triad Quiz

1. What does confidentiality protect against in the CIA Triad?

2.

What first name or nickname would you like us to use?

2. Defense in depth involves using multiple layers of security controls.

3. Which of the following is NOT part of the CIA Triad?

4. A vulnerability is a weakness that could be exploited by a threat actor.

5. What is the primary purpose of a firewall in network security?

6. Multi-factor authentication enhances security by requiring multiple forms of verification.

7. Which control type is used to prevent unauthorized access to sensitive data?

8. A digital signature primarily protects which CIA Triad component?

9. What is the primary goal of encryption in cybersecurity?

10. Which of the following is an example of a threat to confidentiality?

11. Availability in cybersecurity means systems and data are accessible when needed by authorized users.

12. A DDoS attack primarily threatens which aspect of the CIA Triad?

13. Which security principle ensures that users can only access resources they are authorized to use?

14. A backup and disaster recovery plan primarily protects which CIA component?

15. Which component of the CIA Triad ensures that data cannot be modified by unauthorized parties?

16. Which of the following best describes a zero-day vulnerability?

17. Access control lists (ACLs) are used to enforce which CIA Triad principle?

18. Malware that corrupts files violates the ______ principle of the CIA Triad.

19. Risk is the combination of threat and ______ in a security context.

20. Phishing attacks are primarily designed to compromise user ______ and passwords.