CIA Triad and Core Security Principles Quiz

1. What is the primary purpose of encryption in protecting confidentiality?

To verify user identity

To convert plaintext into unreadable ciphertext

To ensure system uptime

To detect unauthorized access

2. Which security principle requires that sensitive operations be performed by two or more individuals?

Least privilege

Defense in depth

Separation of duties

Need to know

3. True or False: Social engineering attacks exploit human psychology rather than technical vulnerabilities.

True

False

Submit

5. What does the term 'zero trust' mean in cybersecurity?

Never implement security measures

Trust no user or device; verify all access

Trust all internal network traffic

Eliminate authentication requirements

6. Which of the following is a vulnerability assessment tool commonly used in security testing?

Nessus

Metasploit

Wireshark

All of the above

7. What is the primary benefit of implementing defense in depth?

Single strong security layer is sufficient

Multiple security layers reduce risk if one fails

It eliminates the need for passwords

It guarantees no breaches will occur

8. What does the principle of non-repudiation ensure?

Users cannot deny their actions or transactions

Systems have continuous uptime

Data cannot be encrypted

Passwords are never required

9. What is the primary goal of a security audit?

To increase system performance

To identify vulnerabilities and compliance gaps

To replace all software

To eliminate all user accounts

10. Which access control model grants permissions based on user roles within an organization?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

Mandatory Access Control (MAC)

11. True or False: Symmetric encryption uses the same key for both encryption and decryption.

True

False

12. Which principle states that users should have the minimum access necessary to perform their job?

Defense in depth

Least privilege

Zero trust

Separation of duties

13. What does a digital signature provide to a message?

Encryption and confidentiality only

Authentication, non-repudiation, and integrity

Availability and performance

Access control and authorization

14. Which authentication method uses something you know, something you have, and something you are?

Single-factor authentication

Two-factor authentication

Multi-factor authentication

Biometric authentication

15. Which component of the CIA Triad ensures that data cannot be modified or altered by unauthorized parties?

Confidentiality

Integrity

Availability

Authenticity

16. Which cryptographic algorithm is commonly used for secure data transmission over the internet?

MD5

SHA-1

RSA

DES

17. True or False: A firewall can prevent all types of cyberattacks.

True

False

18. Which security framework provides guidelines for managing IT security risks?

NIST Cybersecurity Framework

ISO 27001

Both A and B

Neither A nor B

19. True or False: Public-key cryptography uses two different keys for encryption and decryption.

True

False

20. A denial-of-service (DoS) attack primarily threatens which CIA Triad component?

Confidentiality

Integrity

Availability

Authentication

Tech+ CIA Triad and Core Security Principles Quiz

1. What is the primary purpose of encryption in protecting confidentiality?

2.

What first name or nickname would you like us to use?

2. Which security principle requires that sensitive operations be performed by two or more individuals?

3. True or False: Social engineering attacks exploit human psychology rather than technical vulnerabilities.

4. A hash function is primarily used to ensure data ____.

5. What does the term 'zero trust' mean in cybersecurity?

6. Which of the following is a vulnerability assessment tool commonly used in security testing?

7. What is the primary benefit of implementing defense in depth?

8. What does the principle of non-repudiation ensure?

9. What is the primary goal of a security audit?

10. Which access control model grants permissions based on user roles within an organization?

11. True or False: Symmetric encryption uses the same key for both encryption and decryption.

12. Which principle states that users should have the minimum access necessary to perform their job?

13. What does a digital signature provide to a message?

14. Which authentication method uses something you know, something you have, and something you are?

15. Which component of the CIA Triad ensures that data cannot be modified or altered by unauthorized parties?

16. Which cryptographic algorithm is commonly used for secure data transmission over the internet?

17. True or False: A firewall can prevent all types of cyberattacks.

18. Which security framework provides guidelines for managing IT security risks?

19. True or False: Public-key cryptography uses two different keys for encryption and decryption.

20. A denial-of-service (DoS) attack primarily threatens which CIA Triad component?