In the CIA triad of information security, the letter I stands for:
- A.Identification
- B.Integrity
- C.Internet
- D.Isolation
Correct answer
Explanation
The correct answer is B, integrity. The triad names the three goals of information security: confidentiality, that only authorised people can read the data; integrity, that the data is complete and unaltered from the moment it was created or sent; and availability, that the system works when an authorised user needs it. Option A is wrong because identification, along with authentication, is a means of achieving these goals rather than one of the three goals themselves. Option C is wrong because the internet is the medium over which most attacks travel and is no part of the model. Option D is wrong because isolation, such as keeping a critical machine off the network, is one technique among many for protecting a system. A useful way to recall the triad is to ask who may read the data, whether it can be changed, and whether it can be reached.
Read the full article: Cyber Security and Threats: Malware, Attacks and PYQs
Practice Questions
View allWhich of the following is a type of cyber attack that involves tricking users into revealing sensitive information?
- A.Phishing attack
- B.SQL injection attack
- C.DoS attack
- D.None of the above
Show answer
Phishing sends a message that looks as if it came from a bank, an employer or a government office, and asks the reader to confirm a password, a card number or a one-time password on a page that belongs to the attacker; the target of the attack is the person…
Read the full explanation →What is the purpose of a firewall in cyber security?
- A.To allow unrestricted access to a network
- B.To block unauthorised access to a network
- C.To create a backup of a network's data
- D.None of the above
Show answer
A firewall sits between a trusted internal network and the untrusted world outside, inspects the traffic crossing it and permits only what its rules allow, dropping the rest; it may be a hardware appliance, a software program or both together.
Read the full explanation →What is the term for a cyber security attack that targets multiple interconnected devices simultaneously to create a large-scale attack network?
- A.DDoS attack
- B.Botnet attack
- C.Zero-day attack
- D.Spear phishing attack
Show answer
A botnet is built by infecting many connected devices, each of which becomes a zombie obeying a single controller; the network so assembled is then rented out or used for spam, fraud or a flood of traffic.
Read the full explanation →The feature(s) of cyber security is/are:
- A.Compliance
- B.Defence against internal threats
- C.Threat prevention
- D.All of the above
Show answer
The correct answer is D, all of the above, because cyber security is not one activity but a programme that covers all three.
Read the full explanation →Which type of malware is a stand-alone program that replicates itself across a network without attaching to a host file?
- A.Virus
- B.Worm
- C.Trojan horse
- D.Adware
Show answer
A worm carries its own code, finds other machines through the network and copies itself to them without any help from the user, which is why worms can spread across the world in hours.
Read the full explanation →