What is the difference between authentication and authorization?

Authentication verifies identity; Authorization determines access rights

What is the main goal of resilience in cybersecurity?

To maintain operations and recover quickly after an incident

What is the purpose of defense-in-depth in cybersecurity?

To apply multiple layers of security controls

What does the 'CIA Triad' stand for in cybersecurity?

Confidentiality, Integrity, Availability

The principle of "least privilege" is best described as

Allowing access only when absolutely necessary

What is a common resilience practice in cybersecurity?

Regular updates and recovery planning

Multi-Factor Authentication (MFA) involves:

Two or more methods of verifying identity

studbud

Best Practices

15 termsStudBud Administration

Imported from external platform

Flashcards15 cardsFPractice quizPHost liveL

Questions 15

Answers

1
What is the difference between authentication and authorization?
They are the same process
Authentication limits access; Authorization verifies identity
Authentication verifies identity; Authorization determines access rights
Authentication uses RBAC; Authorization uses biometrics
2
Which cybersecurity principle focuses on ensuring that resources are accessible when needed?
Non-repudiation
Availability
Authorization
Confidentiality
3
What is the main goal of resilience in cybersecurity?
To avoid updating systems
To punish attackers
To maintain operations and recover quickly after an incident
To stop all attacks
4
Which of the following best represents the 'Three Pillars' of cybersecurity?
Firewall, Antivirus, Encryption
Hardware, Software, Firmware
People, Processes, Technology
Network, Application, Endpoint
5
Which principle grants permissions to a verified user based on their role?
Authorization
Confidentiality
Authentication
Access control
6
What is the purpose of defense-in-depth in cybersecurity?
To rely on a single strong firewall
To apply multiple layers of security controls
To prevent employees from accessing systems
To use physical security for data centers only
7
What principle ensures data is protected from unauthorized modification
Integrity
Accountability
Confidentiality
Availability
8
What does the 'CIA Triad' stand for in cybersecurity?
Confidentiality, Integrity, Accessibility
Confidentiality, Integrity, Availability
Control, Integrity, Authorization
Confidentiality, Input, Authentication
9
The principle of "least privilege" is best described as
Allowing access only when absolutely necessary
Giving users full access for convenience
Restricting access to guests only
Limiting access to physical locations
10
Which principle is most violated in the Equifax breach due to unpatched systems
Availability
Integrity
Accountability
Risk Management
11
What is a common resilience practice in cybersecurity?
Disabling backups
Regular updates and recovery planning
Ignoring threat alerts
Avoiding encryption
12
Which of the following methods helps establish accountability
Open access policies
Audit logs
Firewall rules
Password sharing
13
Multi-Factor Authentication (MFA) involves:
Two or more passwords
Only fingerprint scanning
One strong password and a security question
Two or more methods of verifying identity
14
Which of the following is a key feature of Zero Trust Architecture
Trust everything inside the firewall
Trust but verify
Implicit trust in internal networks
Never trust, always verify
15
Technology in cybersecurity should be complemented by
Avoiding encryption
Business profits
User entertainment
People and processes

Best Practices Flashcards | StudBud