منشور Part 1: Choose ONE correct answer (A, B, C, or D) for each question.

Part 1: Choose ONE correct answer (A, B, C, or D) for each question. 1. Which of the following represents the three main goals of computer security? A. Authentication, Authorization, Accounting B. Confidentiality, Integrity, Availability C. Prevention, Detection, Recovery D. Encryption, Decryption, Hashing 2. Which statement best describes a threat? A. A protective measure that reduces risk B. A successful security control C. A circumstance that has the potential to cause loss or harm D. A method of recovering deleted files 3. What does the principle of the weakest link indicate in computer security? A. A system is secure if encryption is strong B. Security depends only on hardware protection C. A failure in any critical control can lead to a security failure D. All security controls provide equal protection 4. Which security characteristic ensures that a party cannot deny an action or communication they originated? A. Availability B. Integrity C. Confidentiality D. Nonrepudiation 5. Which statement correctly describes the relationship between vulnerabilities, threats, and controls? A. Vulnerabilities are always security controls B. Threats eliminate vulnerabilities automatically C. Threats may exploit vulnerabilities, while controls help protect against exploitation D. Controls create threats, while vulnerabilities prevent attacks 6. Which of the following is a potential problem with biometric authentication? A. It cannot verify identity B. It always requires a password C. It prevents all authentication errors D. It may produce false acceptance or false rejection 7. In Discretionary Access Control (DAC), who determines the access rights? A. The system administrator in every case B. The owner of the resource C. The operating system based only on classification D. The user's assigned organizational role 8. Which situation is most likely to require stronger authentication according to the slides? A. Performing a large banking transaction from an unknown device B. Browsing a public information page C. Accessing social media from a known device D. Reading a public news website 9. In role-based access control (RBAC), permissions are assigned based on: A. The length of the password B. The user's fingerprint C. A user's role D. The age of the device 10. Which practice is explicitly recommended by access policies in the slides? A. Avoid checking every access B. Enforce least privilege C. Disable audit logging D. Allow all access requests 11. Which cryptanalysis technique involves looking for patterns and similarities in encrypted messages without knowing the plaintext? A. Ciphertext-only analysis B. Digital signing C. Chosen-plaintext analysis D. Key generation 12. In a chosen-plaintext attack, what can the attacker do? A. Modify the encryption algorithm permanently B. Prevent all messages from being encrypted C. Recover every encryption key automatically D. Feed selected plaintexts into the encryption process and observe the ciphertext 13. Which cryptographic primitive distributes information from individual plaintext characters across the ciphertext? A. Authentication B. Key exchange C. Diffusion D. Substitution 14. What is the main purpose of chaining in block encryption? A. To reduce plaintext size B. To make each block's encryption depend on the previous block C. To eliminate encryption keys D. To convert symmetric encryption into asymmetric encryption 15. What is one advantage of Elliptic Curve Cryptography (ECC) over RSA? A. It provides similar security using shorter keys B. It eliminates all implementation weaknesses C. It uses only symmetric encryption D. It requires no encryption keys BONUS 1. 16. What is one challenge associated with using multiple authentication tokens? A. Tokens eliminate all security risks B. Tokens prevent users from accessing the internet C. Tokens make authentication unnecessary D. Managing multiple devices and recovery information can be difficult