Information Security Fundamentals ECSS Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In an e-commerce transaction, a customer claims they never placed an order. Which security mechanism would provide evidence that the customer did place the order?

   • AHashing
   • BEncryption
   • CDigital signature
   • DFirewall
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which security goal is achieved when a digital signature provides proof that a specific user sent a message and cannot later deny having sent it?

   • AAvailability
   • BConfidentiality
   • CIntegrity
   • DNon-repudiation
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A financial firm is assessing the risk of a new online trading platform. The platform will handle highly sensitive customer financial data. The risk assessment team identifies that a data breach could cost $5 million in fines and reputational damage. The team estimates that the probability of a breach in the next year is 10%. The cost to implement a robust encryption and monitoring solution is $300,000 per year. What is the most appropriate risk management decision based on this analysis?

   • AAccept the risk because the probability is low
   • BAvoid the risk by discontinuing the online trading platform
   • CMitigate the risk by implementing the encryption and monitoring solution
   • DTransfer the risk by purchasing cyber insurance
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An e-commerce company is facing disputes from customers who claim they did not place certain orders. The company has logs showing the orders were placed from the customers' accounts, but the customers argue that their accounts were compromised. The company wants to implement a mechanism that will provide stronger evidence that the customer actually placed the order. Which mechanism would be most effective?

   • ARequire a digital signature for each order
   • BImplement multi-factor authentication (MFA) for login
   • CRecord IP addresses and device fingerprints for each order
   • DSend an email confirmation after each order
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A financial trading firm's primary database is replicated to a secondary site in real time. A ransomware attack encrypts the primary database, but the secondary replica is unaffected. The firm's priority is to resume trading with minimal data loss. Which action best balances availability and integrity?

   • ARestore the primary database from last night's backup
   • BKeep the primary offline and investigate the attack before any failover
   • CPay the ransom to decrypt the primary database
   • DFail over to the secondary replica immediately and continue operations
   Reveal Solution Discussion Select an answer first