SECURITY+ SY0-601 EXAM QUESTIONS AND ANSWERS

What are the three properties of secure information? - Answer- Confidentiality, Integrity, and Availability What does confidentiality mean in the context of the CIA Triad? - Answer- means that certain information should only be known to certain people. What does integrity mean in the context of the CIA Triad? - Answer- means that the data is stored and transferred as intended and that any modification is authorized. What does availability mean in the context of the CIA Triad? - Answer- means that information is accessible to those authorized to view or modify it. What is a fourth property of secure information that could be added to the CIA Triad? - Answer- Nonrepudiation What is nonrepudiation? - Answer- means that a subject cannot deny doing something, such as creating, modifying, or sending a resource. What are the five functions of cybersecurity according to the National Institute of Standards and Technology (NIST)? - Answer- Identify, Protect, Detect, Respond, and Recover What does 'Identify' mean in the context of cybersecurity functions according to the NIST? - Answer- develop security policies and capabilities. Evaluate risks, threats, and vulnerabilities and recommend security controls to mitigate them. What does 'protect' mean in the context of cybersecurity functions according to the NIST? - Answer- procure/develop, install, operate, and decommission IT hardware and software assets with security as an embedded requirement of every stage of this operations life cycle. What does 'detect' mean in the context of cybersecurity functions according to the NIST? - Answer- perform ongoing, proactive monitoring to ensure that controls are effective and capable of protecting against new types of threats. What does 'respond' mean in the context of cybersecurity functions according to the NIST? - Answer- identify, analyze, contain, and eradicate threats to systems and data security. Wha