CIS424 - Module 1 Introduction to Information Security EXAM Questions AND
Correct Answers
__ of information is the quality or stat of being genuine or original -
✔✔authenticity
a subject or object's ___ refers to its ability to use, manipulate, modify -
✔✔access
a technique used to compromise a system is known as - ✔✔exploit
a weakness in a system or control, when it is known to an attacker is referred to
- ✔✔exposure
accuracy - ✔✔free from mistake or error and having the value that the end user
expects
authenticity - ✔✔state and quality of being genuine and original
C.I.A. triad - ✔✔The industry standard for computer security since the
development of the mainframe. The standard is based on three characteristics
that describe the utility of information: confidentiality, integrity, and
availability.
CNSS Security Model - ✔✔model is a useful guide to those developing a security
program because of each intersection point allows us to consider the 3
dimensions
, control, safeguard, or countermeasure - ✔✔security mechanisms, policies, or
procedures that can successfully counter attackers reduce risks, resolve
vulnerabilities, and improve security within an organization
direct attack - ✔✔originate from the threat itself
exploit - ✔✔a technique used to compromise a system
exposure - ✔✔exposure exists when a vulnerability is known to an attacker
indirect attack - ✔✔originate from a compromised system or resource that is
malfunctioning or working under the control of a threat
integrity of information is maintained when it is whole: - ✔✔- file corruption
may not strictly be the result of hackers or other external forces
-important that these counts have integrity because people and systems need
to be able to trust that it is accurate
McCumber Cube - ✔✔A graphical representation of the architectural approach
widely used in computer and information security.
-each of the 27 areas must be properly addressed to ensure comprehensive
system security
possession - ✔✔quality and state of having ownership and come of some object
and item
Correct Answers
__ of information is the quality or stat of being genuine or original -
✔✔authenticity
a subject or object's ___ refers to its ability to use, manipulate, modify -
✔✔access
a technique used to compromise a system is known as - ✔✔exploit
a weakness in a system or control, when it is known to an attacker is referred to
- ✔✔exposure
accuracy - ✔✔free from mistake or error and having the value that the end user
expects
authenticity - ✔✔state and quality of being genuine and original
C.I.A. triad - ✔✔The industry standard for computer security since the
development of the mainframe. The standard is based on three characteristics
that describe the utility of information: confidentiality, integrity, and
availability.
CNSS Security Model - ✔✔model is a useful guide to those developing a security
program because of each intersection point allows us to consider the 3
dimensions
, control, safeguard, or countermeasure - ✔✔security mechanisms, policies, or
procedures that can successfully counter attackers reduce risks, resolve
vulnerabilities, and improve security within an organization
direct attack - ✔✔originate from the threat itself
exploit - ✔✔a technique used to compromise a system
exposure - ✔✔exposure exists when a vulnerability is known to an attacker
indirect attack - ✔✔originate from a compromised system or resource that is
malfunctioning or working under the control of a threat
integrity of information is maintained when it is whole: - ✔✔- file corruption
may not strictly be the result of hackers or other external forces
-important that these counts have integrity because people and systems need
to be able to trust that it is accurate
McCumber Cube - ✔✔A graphical representation of the architectural approach
widely used in computer and information security.
-each of the 27 areas must be properly addressed to ensure comprehensive
system security
possession - ✔✔quality and state of having ownership and come of some object
and item
