A new employee at a small marketing firm is setting up their work laptop for the first time. They need to connect to the company’s internal file server to access shared project documents. Which of the following network types would most likely be used for this internal, private connection?

You are explaining the core principles of information security to a colleague. You state that ensuring information is accessible and usable upon demand by an authorized entity is a primary goal. Which principle of the CIA triad are you describing?

During a security awareness training, the presenter shows an email that appears to be from the company’s IT help desk, urgently requesting employees to click a link and verify their login credentials. The presenter labels this as a common attack that relies on deception rather than technical exploitation. What type of attack is this primarily an example of?

A software development team is preparing to release a new application. Before launch, a dedicated team member is tasked with systematically attempting to identify vulnerabilities by simulating the actions of a malicious attacker. What is this process most accurately called?

Consider a company policy that states ’employees must not install unauthorized software on company-issued devices.’ This rule is an example of which foundational type of security control?

When logging into a sensitive financial application, a user is required to provide both their password and a temporary, time-sensitive code sent to their mobile phone. What security concept does this two-step process best demonstrate?

A database administrator is configuring access rights for a new customer support representative. According to security best practices, the representative’s account should be granted just enough permissions to view customer contact information and update support tickets, but not to modify financial records or system configurations. Which principle is the administrator applying?

An organization’s incident response plan outlines specific steps to be taken immediately after a data breach is discovered. One of the first steps is to isolate the affected systems from the network to prevent the threat from spreading. What phase of the incident response process does this action belong to?

You receive an alert that a server in your data center is overheating. You dispatch a technician to check the HVAC (Heating, Ventilation, and Air Conditioning) system and ensure backup generators are functional. By addressing these environmental and support systems, you are primarily safeguarding which aspect of security?

A new employee at a small marketing firm is setting up their work laptop for the first time. They need to connect to the company’s internal file server to access shared project documents. Which of the following network types would most likely be used for this internal, private connection?0