- What is information security and how is it achieved?
- What are the core principles of information security?
- What is non-repudiation (as it applies to IT security)?
- What is the relationship between information security and data availability?
- What is a security policy and why do we need one?
- What is the difference between logical and physical security? Can you give an example of both?
- What's an acceptable level of risk?
- What are the most common types of attacks that threaten enterprise data security?
- What is the difference between a threat and a vulnerability?
- Can you give me an example of common security vulnerabilities?