CIA Triad and Core Security Principles Quiz

1. True or False: A firewall can prevent all types of cyberattacks.

True

False

2. Which security principle requires that sensitive operations be performed by two or more individuals?

Least privilege

Defense in depth

Separation of duties

Need to know

3. True or False: Social engineering attacks exploit human psychology rather than technical vulnerabilities.

True

False

Submit

5. What does the term 'zero trust' mean in cybersecurity?

Never implement security measures

Trust no user or device; verify all access

Trust all internal network traffic

Eliminate authentication requirements

6. Which of the following is a vulnerability assessment tool commonly used in security testing?

Nessus

Metasploit

Wireshark

All of the above

7. True or False: Public-key cryptography uses two different keys for encryption and decryption.

True

False

8. What is the primary benefit of implementing defense in depth?

Single strong security layer is sufficient

Multiple security layers reduce risk if one fails

It eliminates the need for passwords

It guarantees no breaches will occur

9. Which security framework provides guidelines for managing IT security risks?

NIST Cybersecurity Framework

ISO 27001

Both A and B

Neither A nor B

10. What does the principle of non-repudiation ensure?

Users cannot deny their actions or transactions

Systems have continuous uptime

Data cannot be encrypted

Passwords are never required

11. Which component of the CIA Triad ensures that data cannot be modified or altered by unauthorized parties?

Confidentiality

Integrity

Availability

Authenticity

12. Which cryptographic algorithm is commonly used for secure data transmission over the internet?

MD5

SHA-1

RSA

DES

13. What is the primary goal of a security audit?

To increase system performance

To identify vulnerabilities and compliance gaps

To replace all software

To eliminate all user accounts

14. Which access control model grants permissions based on user roles within an organization?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

Mandatory Access Control (MAC)

15. True or False: Symmetric encryption uses the same key for both encryption and decryption.

True

False

16. Which principle states that users should have the minimum access necessary to perform their job?

Defense in depth

Least privilege

Zero trust

Separation of duties

17. What does a digital signature provide to a message?

Encryption and confidentiality only

Authentication, non-repudiation, and integrity

Availability and performance

Access control and authorization

18. Which authentication method uses something you know, something you have, and something you are?

Single-factor authentication

Two-factor authentication

Multi-factor authentication

Biometric authentication

19. A denial-of-service (DoS) attack primarily threatens which CIA Triad component?

Confidentiality

Integrity

Availability

Authentication

20. What is the primary purpose of encryption in protecting confidentiality?

To verify user identity

To convert plaintext into unreadable ciphertext

To ensure system uptime

To detect unauthorized access

Tech+ CIA Triad and Core Security Principles Quiz

1. True or False: A firewall can prevent all types of cyberattacks.

2.

What first name or nickname would you like us to use?

2. Which security principle requires that sensitive operations be performed by two or more individuals?

3. True or False: Social engineering attacks exploit human psychology rather than technical vulnerabilities.

4. A hash function is primarily used to ensure data ____.

5. What does the term 'zero trust' mean in cybersecurity?

6. Which of the following is a vulnerability assessment tool commonly used in security testing?

7. True or False: Public-key cryptography uses two different keys for encryption and decryption.

8. What is the primary benefit of implementing defense in depth?

9. Which security framework provides guidelines for managing IT security risks?

10. What does the principle of non-repudiation ensure?

11. Which component of the CIA Triad ensures that data cannot be modified or altered by unauthorized parties?

12. Which cryptographic algorithm is commonly used for secure data transmission over the internet?

13. What is the primary goal of a security audit?

14. Which access control model grants permissions based on user roles within an organization?

15. True or False: Symmetric encryption uses the same key for both encryption and decryption.

16. Which principle states that users should have the minimum access necessary to perform their job?

17. What does a digital signature provide to a message?

18. Which authentication method uses something you know, something you have, and something you are?

19. A denial-of-service (DoS) attack primarily threatens which CIA Triad component?

20. What is the primary purpose of encryption in protecting confidentiality?