Tech+ Security Quiz: CIA Triad & Security Fundamentals

1. What is the primary goal of a security audit?

To install new software

To identify vulnerabilities and assess security controls

To replace all passwords

To increase network bandwidth

2. True or False: A strong password should contain uppercase, lowercase, numbers, and special characters.

True

False

3. What is the primary difference between a virus and a worm?

Viruses require user interaction; worms replicate independently

Worms are more dangerous than viruses

Viruses only affect Windows systems

Worms cannot spread over networks

4. Which access control model assigns permissions based on a user's role within the organization?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

Mandatory Access Control (MAC)

Submit

6. True or False: Confidentiality is maintained when data is accessible to authorized users at all times.

True

False

7. What does VPN stand for?

Virtual Personal Network

Virtual Private Network

Verified Public Network

Virtual Protection Notation

8. Which of the following is NOT a common authentication factor?

Something you know (password)

Something you have (security token)

Something you are (biometric)

Something you like (favorite color)

Submit

10. Asymmetric encryption uses two keys. What are they called?

Private and shared keys

Primary and secondary keys

Public and private keys

Master and slave keys

11. Which component of the CIA Triad ensures that data is accurate and has not been altered without authorization?

Confidentiality

Integrity

Availability

Authentication

12. Which principle states that users should have only the minimum access rights needed to perform their job?

Defense in depth

Least privilege

Zero trust

Separation of duties

Submit

14. Which type of malware replicates itself and spreads to other systems without user interaction?

Trojan horse

Virus

Worm

Spyware

15. What is the primary purpose of a firewall?

Encrypt all network traffic

Monitor and control incoming and outgoing network traffic

Detect viruses on the system

Backup critical data

16. Which of the following is a social engineering attack that attempts to trick users into revealing sensitive information?

Phishing

Malware

Ransomware

Brute force

17. A user logs in with a password and receives a code on their phone to verify identity. This is an example of:

Single-factor authentication

Multi-factor authentication

Biometric authentication

Token-based authentication

18. Which encryption type uses a single shared key for both encryption and decryption?

Asymmetric encryption

Symmetric encryption

Public key encryption

Hash encryption

19. What does the 'A' in CIA Triad represent?

Authenticity

Accessibility

Availability

Accountability

Tech+ Security Quiz: Can You Master CIA Triad & Basics?

1. What is the primary goal of a security audit?

2.

What first name or nickname would you like us to use?

2. True or False: A strong password should contain uppercase, lowercase, numbers, and special characters.

3. What is the primary difference between a virus and a worm?

4. Which access control model assigns permissions based on a user's role within the organization?

5. A ____ is a security vulnerability that is unknown to the vendor and has no patch available.

6. True or False: Confidentiality is maintained when data is accessible to authorized users at all times.

7. What does VPN stand for?

8. Which of the following is NOT a common authentication factor?

9. A ____ is a type of malware that encrypts a user's files and demands payment for decryption.

10. Asymmetric encryption uses two keys. What are they called?

11. Which component of the CIA Triad ensures that data is accurate and has not been altered without authorization?

12. Which principle states that users should have only the minimum access rights needed to perform their job?

13. A ____ is a cryptographic function that converts input data into a fixed-length string of characters.

14. Which type of malware replicates itself and spreads to other systems without user interaction?

15. What is the primary purpose of a firewall?

16. Which of the following is a social engineering attack that attempts to trick users into revealing sensitive information?

17. A user logs in with a password and receives a code on their phone to verify identity. This is an example of:

18. Which encryption type uses a single shared key for both encryption and decryption?

19. What does the 'A' in CIA Triad represent?