Security Fundamentals and Best Practices Questions

Assesses foundational information security concepts and practical best practices. Key areas include the goals of confidentiality, integrity, and availability and how those goals drive control selection; the principle of least privilege; defense in depth and secure defaults; access control models; risk based decision making; security policy creation and enforcement; and familiarity with common frameworks such as the National Institute of Standards and Technology and ISO 27001. Candidates should be able to describe how these principles translate into controls and architectural patterns, discuss trade offs, and apply frameworks to simple scenarios.