1. Someone edits an internal wiki so that a company AI assistant begins giving everyone a subtly wrong answer. Which property has been broken?
2. Why are integrity failures often more damaging than confidentiality failures?
3. What does least privilege actually achieve?
4. Which of these are common causes of privilege creep? Select all that apply.
5. An AI assistant is connected to a shared mailbox. Which scoping decision most changes the worst case outcome?
6. What is the most useful question to ask about any proposed security control?
7. An organisation stores its backups on a network share reachable with the same administrative credentials used for its file servers. What is the problem?
8. Which of the following are examples of correlated failure? Select all that apply.
9. A policy states that "staff are responsible for identifying suspicious requests before acting". What is the fundamental weakness?
10. Why do the three properties of the triad create tradeoffs rather than a single correct answer?