Describe Key Security Concepts Surrounding Information Assurance Including Confidentiality, Integrity and Availability and Basic Risk Management. SPLK-5001 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company's security team is designing a backup and recovery plan. They need to ensure that data can be restored quickly in case of a ransomware attack, but they also want to prevent the backup data from being encrypted by the attacker. Which approach best balances availability and integrity?

   • AStore backups on the same network as the primary data for easy access.
   • BPerform backups daily but do not test restoration.
   • CEncrypt backups but store them on the same server as the primary data.
   • DUse immutable backups that cannot be modified or deleted, and store them offline or in a separate isolated environment.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security team is conducting a risk assessment for a legacy system that is critical to operations but cannot be patched due to vendor end-of-life. The system is exposed to the internet and has known vulnerabilities. The team must decide how to handle the risk. Which option is the most appropriate risk mitigation strategy?

   • ATransfer the risk by purchasing cyber insurance.
   • BPlace the system behind a firewall and restrict access to only necessary users.
   • CAccept the risk because the system is critical and cannot be changed.
   • DImmediately decommission the system.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is the correct sequence of the core components of risk management?

   • AIdentification, mitigation, assessment
   • BAssessment, mitigation, identification
   • CMitigation, identification, assessment
   • DIdentification, assessment, mitigation
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement best describes the relationship among confidentiality, integrity, and availability?

   • AThey are complementary but often require trade-offs
   • BThey are only relevant to government systems
   • CThey are independent and can be maximized without affecting each other
   • DThey are mutually exclusive; only one can be achieved at a time
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which security objective is most directly compromised when an attacker reads a file containing customer credit card numbers?

   • AAvailability
   • BIntegrity
   • CNon-repudiation
   • DConfidentiality
   Reveal Solution Discussion Select an answer first