Review questions

Review questions

Test your understanding with these questions. Marking and saved results are available with a free account.

1. Question 1An employee sends a grade roster to an unintended group. The file remains accurate and the service stays available. Which property is directly exposed first?

   Confidentiality, because disclosure left the authorized audience Integrity, because sending always changes file contents Availability, because an unintended recipient can open the message Non-repudiation, because the sender's name appears in the email
2. Question 2Account analyst7 logs in successfully, but policy denies a grade-roster download because the role can read summaries only. Which statement fits AAA?

   Authorization denied the action, and accounting retained the attempt and decision Accounting granted temporary permission because login succeeded A denied download proves there was no access attempt Authentication established download rights, and accounting canceled the denial
3. Question 3In a training scenario, a personal-roster link reaches the wrong group. Logs show two openings, no observed edit and no outage. One opening might be an automated test, but no record confirms it. What is the most disciplined first decision?

   Contain the link under the plan, preserve records and escalate confidentiality exposure while leaving the reader's identity unresolved Publish record owners' names so they can check access themselves Assume both openings were automated and close the case because no edit occurred Declare confirmed integrity and availability breaches and rebuild the service
4. Question 4On a practice 1–3 scale, risk A has likelihood 2 and impact 3; risk B has likelihood 3 and impact 1. Which initial rank follows?

   B first because its likelihood is higher regardless of impact A first with score 6 versus 3, while the scale remains ordinal They tie because the values sum to five for both Neither can be ranked without exact monetary loss
5. Question 5One internal document requires account review quarterly; another lists steps to extract and compare accounts. What classification fits?

   The first is universal law and the second a professional framework The first is an internal periodic standard and the second an operating procedure The first is a procedure and the second law because it has steps Writing both documents proves complete compliance
6. Question 6A reception terminal faces a corridor and its role reads full files. Which set addresses different exposure paths?

   A shared account to simplify session locking An awareness poster alone, which automatically changes app permissions A tested idle lock, narrower reception fields and a changed screen angle A corridor camera instead of a privilege review
7. Question 7An analyst finds a public link to personal data and two logged requests, then is told to delete the log until a product launch. What comes first?

   Ignore the link because the requests might be internal tests Delete the log because the manager is senior Publish affected people's names to ensure transparency Preserve evidence, report through authorized channels and seek link containment without naming an unproved reader

Create a free account to mark your answers and save your progress.