Describe Key Security Concepts Surrounding Information Assurance Including Confidentiality, Integrity and Availability and Basic Risk Management. SPLK-5001 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium · select all that apply

   A security analyst is conducting a risk assessment for a new cloud-based application. Which of the following are steps in the risk assessment process? (Select all that apply.)

   • AImmediately implement all possible security controls.
   • BPrioritize risks and decide on mitigation strategies.
   • CIdentify assets and their value to the organization.
   • DIdentify threats and vulnerabilities that could affect the assets.
   • EAssess the likelihood and impact of potential risks.
   Check answers Discussion Select an answer first
2. 17foundation · easy

   What is the primary goal of confidentiality in information security?

   • AGuaranteeing data is available when needed
   • BTracking all changes to data for audit purposes
   • CPreventing unauthorized access to data
   • DEnsuring data is accurate and unaltered
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following correctly defines 'risk' in information security?

   • AThe weakness in a system that could be exploited
   • BThe impact of a security incident
   • CThe potential for loss or damage when a threat exploits a vulnerability
   • DThe probability that a vulnerability will be exploited
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A risk assessment for a manufacturing company identifies that a specific machine is vulnerable to a cyber attack that could stop production. The likelihood of the attack is low, but the impact is very high. The company has limited budget for security improvements. What is the most appropriate risk response?

   • AIgnore the risk because the likelihood is low.
   • BImplement a cost-effective control that reduces the likelihood, even if it does not eliminate the risk.
   • CAccept the risk because the likelihood is low.
   • DSpend the entire security budget on this one risk.
   Reveal Solution Discussion Select an answer first
6. 20application · medium · select all that apply

   A security team is implementing controls to protect a database containing personally identifiable information (PII). Which of the following controls directly support confidentiality? (Select all that apply.)

   • AImplementing role-based access control (RBAC) to limit who can view data.
   • BSetting up redundant database servers for failover.
   • CEncrypting the database at rest.
   • DUsing database checksums to detect unauthorized changes.
   Check answers Discussion Select an answer first