CSE 4471 Midterm (A+ graded solutions)

information system correct answers entire set of software, hardware, data, people, procedures, and networks necessary to use information as a resource in the organization security correct answers the quality or state of being secure - to be free from danger successful organization should have multiple levels of security in place correct answers physical security, personal security, operations security, communications security, network security, information security the protection of information correct answers including the systems that store it, including the networks which transmit it, including the users who use it modes of protection correct answers confidentiality, integrity, availability primary tools correct answers policy, education, technology primary goal of information security correct answers protection of information secondary goal of information security correct answers create security awareness in the organization _____________ systems security is a key component in an information system correct answers computer (software and hardware) computer can be _______ of an attack and/or the _______ of an attack correct answers subject (computer is used as an active tool to conduct attack), object (computer is the entity being attacked) security should achieve balance between ________ and _______ correct answers protection and ability CIA triangle correct answers model shows a balance between confidentiality, integrity, availability CNSS Model/McCumber Model correct answers desired goals: confidentiality, integrity, availability measures: policy, education, technology information states: storage, processing, transmission information security program will provide balance between _______ and _______ correct answers security, accessibility