JAIIB Paper 2 Module C Quiz 7

Correct answer: Option 2. The CIA triad is a foundational information-security model: protect information from unauthorised disclosure, alteration and loss of availability. Topic area: Security and Mitigation — CIA triad.

Correct answer: Option 2. Malware includes viruses, worms, trojans, spyware and ransomware. Defence includes patching, endpoint protection, least privilege, backups and monitoring. Topic area: Security and Mitigation — Malware.

Correct answer: Option 4. Ransomware can disrupt operations and compromise data. Banks need prevention, segmentation, tested offline/immutable backups and an incident response plan. Topic area: Security and Mitigation — Ransomware.

Correct answer: Option 3. Timely patching reduces exposure to known vulnerabilities. Banks should prioritise by severity and exposure and test updates before controlled deployment where appropriate. Topic area: Security and Mitigation — Patch management.

Correct answer: Option 3. Vulnerability assessments help identify weaknesses. They should be repeated as systems change and complemented by remediation tracking and other security testing. Topic area: Security and Mitigation — Vulnerability assessment.

Correct answer: Option 3. Penetration testing goes beyond identifying possible weaknesses by safely attempting exploitation within an authorised scope. Findings need remediation and retesting. Topic area: Security and Mitigation — Penetration testing.

Correct answer: Option 4. SIEM platforms aggregate logs and correlate events to detect suspicious activity. Their effectiveness depends on useful log sources, tuning, monitoring and response processes. Topic area: Security and Mitigation — Security Information and Event Management (SIEM).

Correct answer: Option 2. An IDS detects and alerts on suspicious activity; an intrusion prevention system may actively block traffic. Neither eliminates the need for broader controls. Topic area: Security and Mitigation — Intrusion Detection System (IDS).

Correct answer: Option 2. EDR helps detect and investigate malicious activity on endpoints such as workstations and servers and can support containment actions. Topic area: Security and Mitigation — Endpoint detection and response (EDR).

Correct answer: Option 2. Independent verification, cautious handling of links and secrecy of authentication credentials help reduce phishing risk. A bank logo or caller ID is not proof of legitimacy. Topic area: Security and Mitigation — Phishing-resistant behaviour.

Correct answer: Option 2. Social engineering exploits human trust, urgency or fear. Awareness training, verification procedures and a culture of reporting suspected incidents are key defences. Topic area: Security and Mitigation — Social engineering.

Correct answer: Option 2. DLP can monitor sensitive data movement through endpoints, email or networks. It should be configured carefully to protect information without disrupting legitimate work unnecessarily. Topic area: Security and Mitigation — Data loss prevention (DLP).

Correct answer: Option 3. Security-by-design addresses threats throughout development, including requirements, threat modelling, code review, testing and controlled release. Topic area: Security and Mitigation — Secure software development lifecycle.

Correct answer: Option 3. A response plan assigns roles and procedures for triage, containment, investigation, communication, recovery and lessons learned. It should be tested and updated. Topic area: Security and Mitigation — Incident response plan.

Correct answer: Option 3. Human behaviour is a major part of security. Training should be practical, recurring and supported by clear reporting routes and technical safeguards. Topic area: Security and Mitigation — Cybersecurity awareness training.

Correct answer: Option 4. IS audit assesses whether technology controls are appropriately designed and operating. Independence, evidence and remediation follow-up are important. Topic area: Security and Mitigation — Information Systems (IS) audit.

Correct answer: Option 4. Protected logs support investigation and accountability. Centralised collection, access restrictions, time synchronisation and retention controls can improve reliability. Topic area: Security and Mitigation — Audit log protection.

Correct answer: Option 4. Data minimisation reduces privacy and security exposure. Retention must also follow applicable legal and regulatory requirements. Topic area: Security and Mitigation — Data minimisation.

Correct answer: Option 2. Zero trust emphasises explicit verification, least privilege and ongoing assessment. It is an architectural approach rather than a single product. Topic area: Security and Mitigation — Zero-trust security principle.

Correct answer: Option 4. Baselines reduce insecure defaults and configuration drift. Changes should be approved, documented and checked against the bank‘s risk and technology requirements. Topic area: Security and Mitigation — Secure configuration baseline.