1What is the CIA Triad?
Confidentiality Integrity and Availability; the three fundamental goals of information security.
2What is confidentiality?
Ensuring information is accessible only to authorized people.
3What is integrity?
Ensuring information remains accurate complete and unaltered without authorization.
4What is availability?
Ensuring systems and information are accessible when needed.
5What is authentication?
Verifying the identity of a user or device.
6What is authorization?
Determining what an authenticated user is allowed to access or do.
7What is multi-factor authentication?
Using two or more different authentication factors to verify identity.
8What is access control?
A security process that determines who can access resources and what actions they can perform.
9What is auditing?
Recording and reviewing activities to track user actions and detect suspicious behavior.
10What is event logging?
Recording system application and security events for monitoring and troubleshooting.
11What is malware?
Malicious software designed to damage disrupt or gain unauthorized access to systems.
12What is a virus?
Malware that attaches to files or programs and spreads when they are executed.
13What is a worm?
Malware that self-replicates and spreads across systems often through networks.
14What is a Trojan horse?
Malware disguised as legitimate software.
15What is ransomware?
Malware that encrypts or locks data and demands payment.
16What is spyware?
Software that secretly collects information about users.
17What is a rootkit?
Malware designed to hide malicious activity and maintain privileged access.
18What is phishing?
A social engineering attack that tricks people into revealing information or clicking malicious links.
19What is spear phishing?
A targeted phishing attack aimed at a specific individual or organization.
20What is social engineering?
Manipulating people into revealing confidential information or performing unsafe actions.
21What is pretexting?
Creating a fabricated scenario to trick someone into revealing information.
22What is tailgating?
Following an authorized person into a restricted area without permission.
23What is a DoS attack?
Denial of Service; an attack that overwhelms a service or system to make it unavailable.
24What is a DDoS attack?
Distributed Denial of Service; an attack that uses multiple devices or sources to overwhelm a target.
25What is SQL injection?
An attack that inserts malicious SQL statements into vulnerable application inputs to manipulate database queries.
26What is spoofing?
Falsifying an identity or address to impersonate another device user or organization.
27What is footprinting?
Gathering information about a target system or organization.
28What is a zero-day vulnerability?
A software vulnerability unknown to the vendor or without an available security fix.
29What is a firewall?
A security system that monitors and controls incoming and outgoing network traffic based on rules.
30What is the principle of least privilege?
Giving users only the access and permissions necessary to perform their jobs.