TEXAS IRRIGATOR LICENSE
CERTIFICATION PREP STUDY GUIDE
GUARANTEED TO PASS
◉Confidentiality Defintion
Answer: prevent or minimize unauthorized access to data, objects,
resources
◉Confidentiality Controls
Answer: steganography, access control, and encryption
◉Confidentiality Attacks
Answer: capturing network traffic, password cracking,
eavesdropping, shoulder surfing, social engineering, sniffing,
escalation or privileges
◉Integrity Definition
Answer: prevent unauthorized alteration of data
◉Integrity Controls
Answer: logging, access control, hash verification
,◉Integrity Attacks
Answer: viruses, mistakes, coding errors, back doors
◉Availability definition
Answer: sufficient bandwidth and timeliness of processing
◉Availability controls
Answer: redundancy, back-ups, handle interruptions (firewalls,
IDS)
◉Availability Attacks
Answer: DoS, object destruction, interruption
◉AAAA Services
Answer: Identification, authentication, authorization, auditing,
and accounting
◉Security governance
Answer: supporting, defining, and directing the security efforts of
an organization, or
implementing a security solution and a management method
◉Strategic Plan
Answer: multi year, stable
, includes vision and risk management
◉Tactical Plan
Answer: about year long
includes budgets, hiring, maintenance, etc
◉Operational Plan
Answer: monthly/quarterly, detailed step by step procedures,
includes training, product design, deployment
◉Acquisition
Answer: Consider the risks when the organization merges or
acquires another organization.
◉Divestiture
Answer: Consider the risks when an asset (old laptops) or
employee exits the organization
◉Data Classification
Answer: how data is protected based on its need for secrecy,
sensitivity, or confidentiality.
◉Due care
CERTIFICATION PREP STUDY GUIDE
GUARANTEED TO PASS
◉Confidentiality Defintion
Answer: prevent or minimize unauthorized access to data, objects,
resources
◉Confidentiality Controls
Answer: steganography, access control, and encryption
◉Confidentiality Attacks
Answer: capturing network traffic, password cracking,
eavesdropping, shoulder surfing, social engineering, sniffing,
escalation or privileges
◉Integrity Definition
Answer: prevent unauthorized alteration of data
◉Integrity Controls
Answer: logging, access control, hash verification
,◉Integrity Attacks
Answer: viruses, mistakes, coding errors, back doors
◉Availability definition
Answer: sufficient bandwidth and timeliness of processing
◉Availability controls
Answer: redundancy, back-ups, handle interruptions (firewalls,
IDS)
◉Availability Attacks
Answer: DoS, object destruction, interruption
◉AAAA Services
Answer: Identification, authentication, authorization, auditing,
and accounting
◉Security governance
Answer: supporting, defining, and directing the security efforts of
an organization, or
implementing a security solution and a management method
◉Strategic Plan
Answer: multi year, stable
, includes vision and risk management
◉Tactical Plan
Answer: about year long
includes budgets, hiring, maintenance, etc
◉Operational Plan
Answer: monthly/quarterly, detailed step by step procedures,
includes training, product design, deployment
◉Acquisition
Answer: Consider the risks when the organization merges or
acquires another organization.
◉Divestiture
Answer: Consider the risks when an asset (old laptops) or
employee exits the organization
◉Data Classification
Answer: how data is protected based on its need for secrecy,
sensitivity, or confidentiality.
◉Due care
