1 Security Fundamentals and Exam Strategy Free Online FlashCards

What does confidentiality protect?

Confidentiality means information is available only to authorized people, processes, or devices.

How do authentication, authorization, and accounting differ?

Authentication verifies identity; authorization determines what an authenticated identity may do; accounting records activity.

What is the core principle of Zero Trust?

Zero Trust evaluates access using policy and context rather than trusting a user or device merely because it is inside a network boundary.

How are a threat, vulnerability, exploit, and risk related?

A threat is a potential cause of harm; a vulnerability is a weakness; an exploit takes advantage of a weakness; risk is the possibility and impact of loss.

What is the difference between a control category and function?

A category describes what kind of safeguard a control is; a function describes what the control does.

How do preventive, detective, and corrective controls differ?

A preventive control blocks an unwanted event; a detective control identifies or records activity; a corrective control restores a secure or working state.

How do inherent and residual risk differ?

Inherent risk is considered before controls; residual risk is what remains after controls are applied.

What are the four common risk responses?

Mitigate by reducing likelihood or impact; transfer some financial consequences; avoid the risky activity; or accept the risk through an authorized decision.

How is single loss expectancy calculated?

The single loss expectancy is asset value multiplied by exposure factor: $\mathrm{SLE} = \mathrm{asset\ value} \times \mathrm{exposure\ factor}$.

What are the published SY0-701 domain weights?

For SY0-701, the published weights are General Security Concepts 12%, Threats, Vulnerabilities, and Mitigations 22%, Security Architecture 18%, Security Operations 28%, and Security Program Management and Oversight 20%.

How should you use practice tests and review missed questions?

Use practice tests to diagnose knowledge gaps, not to predict your score. Review why each answer was wrong and identify the principle supporting the correct choice.

What does integrity ensure?

Integrity means information remains accurate and complete, and is protected from unauthorized change.