Describe Key Security Concepts Surrounding Information Assurance Including Confidentiality, Integrity and Availability and Basic Risk Management. SPLK-5001 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security analyst is performing a risk assessment for a new application. The analyst has identified the assets, threats, and vulnerabilities, and has assessed the likelihood and impact. What is the next step in the risk assessment process?

   • ATransfer all risks to a third party.
   • BDocument the assessment and stop.
   • CImplement all possible security controls.
   • DCalculate the risk and prioritize mitigation.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A distributed denial-of-service (DDoS) attack floods a web server with traffic, making it unresponsive. Which security objective is most directly affected?

   • AConfidentiality
   • BIntegrity
   • CAuthenticity
   • DAvailability
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services company is planning its annual risk assessment. The CISO wants to identify which assets are most critical to the business and then determine what could harm them. According to basic risk management principles, which sequence of steps should the team follow?

   • AIdentify vulnerabilities, then assign a risk score, then identify assets.
   • BAssess impact first, then identify assets, then implement mitigation.
   • CIdentify assets, identify threats and vulnerabilities, assess likelihood and impact, then prioritize mitigation.
   • DImplement all possible controls first, then identify assets and threats.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team is designing a new system for storing sensitive customer data. They must ensure that data is encrypted at rest and in transit, and that any changes to the data are logged and detectable. Which two CIA attributes are they primarily addressing?

   • AIntegrity and availability
   • BConfidentiality and non-repudiation
   • CConfidentiality and integrity
   • DConfidentiality and availability
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How does a risk assessment inform security decisions?

   • AIt automatically implements security controls
   • BIt identifies all vulnerabilities in the organization
   • CIt guarantees that all risks are eliminated
   • DIt provides a prioritized list of risks to address based on likelihood and impact
   Reveal Solution Discussion Select an answer first