Information Security Quiz & Flashcards

Encryption encodes data to prevent unauthorized access, not for speed, size, or redundancy.

Integrity ensures data accuracy and consistency; confidentiality and availability do not address accuracy.

Firewalls filter traffic to protect networks, not encrypt data, store backups, or provide internet speed.

Social engineering involves manipulating individuals; phishing is a form of it but not the only one.

MFA requires multiple verification methods; SSO is one sign-on, not multiple verifications.

SIEM systems aggregate and analyze security data, not encrypt, manage passwords, or update software.

A DoS attack overwhelms a service; phishing, SQL injection, and XSS are different attack types.

VPNs encrypt internet traffic; they do not inherently increase speed, reduce usage, or remove viruses.

DDoS uses multiple systems; a standard DoS uses one. Neither specifically targets websites or encrypts traffic.

Encryption ensures data confidentiality; it does not reduce size, boost performance, or streamline processing.

A botnet is a network of compromised computers; firewalls, VPNs, and malware are different concepts.

Penetration tests identify vulnerabilities, not encrypt data, increase speed, or backup data.

DLP systems protect against unauthorized data access, not changes in speed, redundancy, or transmission.

Biometrics uses biological characteristics for verification; passwords, encryption, and access lists do not.

Trojans disguise as legitimate software; they are not self-replicating, nor do they affect speed or defragmentation.

MitM attacks intercept communications; they do not encrypt, backup, or increase redundancy of data.

Security tokens provide authentication; they do not encrypt, increase speed, or manage backups.

Ransomware encrypts data for payment; spyware, adware, and Trojans have different purposes.

Patch management updates software to fix vulnerabilities; it does not backup, encrypt, or monitor speed.

IDS monitors for suspicious activity; it does not speed up, encrypt, or update data or software.

SQL Injection manipulates databases via code injection; it does not overload, spy, or intercept.

XSS injects malicious scripts; it does not overload, intercept, or encrypt data.

Sandboxes isolate untrusted programs; they do not increase speed, encrypt, or backup files.

PKI manages certificates and encryption; it does not handle redundancy, speed, or defragmentation.

Zero Trust assumes no inherent trust inside or outside; it does not trust internal, external, or encrypted data by default.

Brute force attacks aim to crack passwords; they do not encrypt, backup, or monitor traffic.

IPS detects and prevents threats; it does not encrypt, backup, or increase speed.

Zero-day exploits target unpatched vulnerabilities; they do not use known, patched, or encrypted data.

Spyware monitors activity; it does not encrypt, speed up, or backup data.

Hash functions ensure integrity by generating fixed-size strings; they do not encrypt, increase redundancy, or monitor.

Digital signatures verify authenticity and integrity; encryption, backup, and firewalls do not directly do this.

Network segmentation improves security by isolation; it does not inherently speed up, encrypt, or defragment.

Digital signatures verify authenticity; they do not encrypt, store, or backup messages.

Phishing involves fraudulent emails asking for information; the other options are different attack types.

ACLs regulate access to resources; they do not encrypt, speed up, or backup data.

Security audits evaluate system security; they do not assess speed, redundancy, or encryption specifically.

APTs are prolonged and targeted; they are not random, quick, or focused on speed or encryption.

SIEM tools aggregate and analyze security data; they do not encrypt, backup, or defragment data.

Vulnerability assessments identify vulnerabilities; they do not encrypt, backup, or enhance speed.

Network segmentation improves security by isolation; it does not increase speed, encrypt, or reduce redundancy.

Two-factor authentication requires two IDs; it does not encrypt, speed up logins, or create backups.

Security tokens authenticate identity; they do not encrypt, speed up, or backup data.

Digital certificates verify identities; they do not encrypt, backup, or defragment data.

Encryption converts data into unreadable code; it does not speed up, increase redundancy, or monitor traffic.

Firewalls monitor and control traffic; they do not encrypt, backup, or increase speed.

Public keys encrypt data; they do not decrypt, increase redundancy, or monitor activity.

RBAC manages access based on roles; it does not handle encryption, speed, or redundancy.

Malware harms or exploits systems; it does not enhance performance, automatically encrypt, or monitor traffic.

Zero Trust never automatically trusts; it does not inherently encrypt or increase speed.

VPNs encrypt internet traffic; they do not increase speed, reduce usage, or provide virus protection.

Ransomware encrypts and demands payment; it does not monitor, speed up, or backup.

Digital signatures validate authenticity; they do not encrypt, store, or backup messages.