General Security Concepts | Test-2
This section focuses on evaluating foundational security practices and principles across the entire system. Tests include assessing the application’s adherence to the CIA triad (Confidentiality, Integrity, and Availability), evaluating security policies, and verifying compliance with industry standards and regulations. It also covers risk management processes, incident response readiness, data classification, and the use of secure development frameworks. Additionally, this section examines overall security awareness and the application’s resilience to common threats such as malware, insider threats, and social engineering attacks.
1 / 15
1. The process of removing private information from sensitive data sets is referred to as:
Data anonymization is the process of modifying or removing personally identifiable information (PII) from a dataset to ensure that individuals’ identities cannot be directly or indirectly identified.
2 / 15
2. Creating software to monitor its functionality and report when the software is down and unable to provide the expected service to the business ensures which of the following?
Availability ensures that systems and data are available to authorized individuals when they need it and under any circumstances, including power outages or natural disasters.
3 / 15
3. The software’s ability to resist attempts by attackers to get past the built-in security protection is also referred to as:
Resiliency in information systems refers to the ability of a system to withstand and recover from disruptions, failures, or unexpected events while maintaining essential functionality and minimizing the impact on operations. It involves designing systems, processes, and infrastructure to be robust, adaptable, and capable of responding effectively to adverse conditions.
4 / 15
4. _____ is a weakness in an IT system that can be exploited by an attacker to deliver a successful attack. They can occur through flaws, features or user error, and attackers will look to exploit any of them, often combining one or more, to achieve their end goal. Choose the correct term below which describes the above definition.
Among all the options listed, the term vulnerability matches the definition of a software flaw
5 / 15
5. Which of the following describes a covert mechanism that guarantees confidentiality?
Steganography is the practice of hiding secret or sensitive information within a seemingly innocuous carrier medium, such as an image, audio file, or text document, without arousing suspicion. It involves concealing the existence of the hidden information, making it difficult to detect or decipher by unauthorized individuals.
6 / 15
6. The process of substituting a uniquely identifiable and pseudo-random symbol for the Primary Account Number (PAN) while maintaining privacy is also referred to as:
By implementing robust canonicalization practices as part of an organization’s information security strategy, potential security vulnerabilities arising from data manipulation or injection attacks can be significantly mitigated. It helps ensure the integrity and security of systems, protects against unauthorized access or data breaches, and enhances overall resilience against common security threats.
7 / 15
7. Which of the following is used to convey and uphold the client’s or business’s availability requirements?
It is a contractual agreement or document that defines the expected level of service between a service provider and a customer or client. SLAs outline the specific services to be provided, the quality standards to be met, and the metrics used to measure performance and service levels.
8 / 15
8. ______ is a piece of code or a program that maliciously takes advantage of vulnerabilities/security flaws in software or hardware to infiltrate and initiate attacks or install malware, such as spyware, ransom ware, Trojan horses, worms, or viruses.
The term ‘Exploit’ matches the definition asked
9 / 15
9. The system’s ability to restore to its pre-existing state of operation in the event that the built-in security measures are compromised is also referred to as:
Recoverability in information systems refers to the ability of a system or organization to recover and restore normal operations after a disruption, failure, or disaster. It involves implementing measures and strategies to minimize downtime, mitigate the impact of disruptions, and restore critical functions and data.
10 / 15
10. After a security breach or other disaster, the length of time needed for business operations to return to the normal service levels that the company anticipates is known as:
Recovery Time Objective (RTO) is a critical metric in disaster recovery and business continuity planning. It represents the targeted duration of time within which a system, service, or operation needs to be recovered and restored after a disruption or disaster occurs.
11 / 15
11. A cybersecurity __________ is an assessment of an organization’s ability to protect its information and information systems from cyber threats. Which of the following term describes this definition?
Risk assessment in information security is a systematic process of identifying, analyzing, and evaluating potential risks and vulnerabilities that could impact the confidentiality, integrity, and availability of an organization’s information assets. The goal of risk assessment is to understand the potential threats and their potential impact, allowing organizations to make informed decisions about how to mitigate or manage those risks effectively.
12 / 15
12. ________implies making anything difficult to comprehend. This type of programming code is frequently used to safeguard intellectual property or trade secrets and to prevent an adversary from reverse engineering a proprietary software application.
Obfuscated code is code that has been intentionally made difficult to understand or read. Obfuscated code may involve techniques such as renaming variables and functions with cryptic names, adding unnecessary complexity, or using unconventional programming constructs. The goal is not to improve performance or functionality but to make the code confusing and less straightforward for anyone trying to analyze or tamper with it.
13 / 15
13. ______ ensures that the code of a program or software download has not been damaged or tampered with once the publisher has signed it
Code signing is a security practice in software development where a digital signature is applied to a piece of code or software to verify its authenticity and integrity. This process involves using cryptographic techniques to sign executables, scripts, or other code artifacts. The digital signature provides a way for users and systems to confirm that the code has not been altered or tampered with since it was signed by the original author or publisher.
14 / 15
14. ____________ are set of rules implemented to secure various types of data and infrastructure critical to an organization. They are also deployed to avoid, detect, counteract, or minimize security risks to physical property, information, computer systems, or any other assets
The correct answer is Information Security controls.
Information security controls are measures and policies put in place to protect an organization’s data and infrastructure from various security threats. They are designed to avoid, detect, counteract, or minimize security risks to physical property, information, computer systems, and other assets.
Here’s a brief overview of the other options:
15 / 15
15. _______is used to check untested or untrusted programs and is intended to prevent dangers from entering the network.
Sandboxing is a security mechanism that isolates and confines applications or processes within a restricted environment, known as a “sandbox.” The purpose of sandboxing is to limit the potential damage that a program or process can cause by restricting its access to system resources and sensitive data. It acts as a virtual container where an application can run separately from the rest of the system, preventing it from affecting other processes or compromising the overall security of the system.
Your score is
The average score is 0%
Restart Test
Related challenges :
