CISSP CHAPTER 1 questions with correct answers

The objectives of security are: - Answer provide availability, integrity, and confidentiality protection to data and resources. Vulnerability - Answer is a weakness in a system that allows a threat source to compromise its security. Threat - Answer is the possibility that someone or something would exploit a vulnerability, either intentionally or accidentally, and cause harm to an asset. Risk - Answer is the probability of a threat agent exploiting a vulnerability and the loss potential from that action. Countermeasure - Answer also called a safeguard or control, mitigates the risk. A control can be: - Answer administrative, technical, or physical and can provide deterrent, preventive, detective, corrective, or recovery protection. Compensating Control - Answer is an alternative control that is put into place because of financial or business functionality reasons.