(OVERLY INFORMATIVE) EXAMS
QUESTIONS AND ANSWERS RATED
A+ SURE PASS
CIAmTriadm-mCORRECTmANSWERSmConfidentiality,mIntegrity,mAvailability
Parkerianmhexadm-
mCORRECTmANSWERSmWheremthemCIAmtriadmconsistsmofmconfidentiality,mintegrity,mandmavailability,
mthemParkerianmhexadmconsistsmofmthesemthreemprinciples,masmwellmasmpossessionmormcontrol,mauth
enticity,mandmutility
Confidentialitym-
mCORRECTmANSWERSmRefersmtomourmabilitymtomprotectmourmdatamfrommthosemwhomaremnotmauthor
izedmtomviewmit.
Confidentialitymcanmbemcompromisedmbymthemlossmofmamlaptopmcontainingmdata,mampersonmlooking
movermourmshouldermwhilemwemtypemampassword,manme-
mailmattachmentmbeingmsentmtomthemwrongmperson,manmattackermpenetratingmourmsystems,mormsi
milarmissues.
Integritym-
mCORRECTmANSWERSmRefersmtomthemabilitymtompreventmourmdatamfrommbeingmchangedminmanmuna
uthorizedmormundesirablemmanner.mThismcouldmmeanmthemunauthorizedmchangemormdeletionmofmo
urmdatamormportionsmofmourmdata,mormitmcouldmmeanmanmauthorized,mbutmundesirable,mchangemorm
deletionmofmourmdata.mTommaintainmintegrity,mwemnotmonlymneedmtomhavemthemmeansmtompreventm
unauthorizedmchangesmtomourmdatambutmalsomneedmthemabilitymtomreversemauthorizedmchangesmth
atmneedmtombemundone.
,Availabilitym-
mCORRECTmANSWERSmrefersmtomthemabilitymtomaccessmourmdatamwhenmwemneedmit.mLossmofmavailab
ilitymcanmrefermtomamwidemvarietymofmbreaksmanywhereminmthemchainmthatmallowsmusmaccessmtomour
mdata.mSuchmissuesmcanmresultmfrommpowermloss,moperatingmsystemmormapplication mproblems,mnet
workmattacks,mcompromisemofmamsystem,mormothermproblems.mWhenmsuchmissuesmaremcausedmbym
anmoutsidemparty,msuchmasmanmattacker,mtheymaremcommonlymreferredmtomasmamdenialmofmservicem(
DoS)mattack.
PossessionmormControlm-
mCORRECTmANSWERSmRefersmtomthemphysicalmdispositionmofmthemmediamonmwhichmthemdatamismsto
red.mThismenablesmus,mwithoutminvolvingmothermfactorsmsuchmasmavailability,mtomdiscussmourmlossmo
fmthemdataminmitsmphysicalmmedium
Anmexamplemismdatamstorembemonmmultiplemdevicesmandmtheremcouldmbemnumerousmversions.
Authenticitym-
mCORRECTmANSWERSmAttributionmasmtomthemownermormcreatormofmthemdataminmquestion.
Authenticitymcanmbemenforcedmthroughmthemusemofmdigitalmsignatures.
Utilitym-mCORRECTmANSWERSmRefersmtomhowmusefulmthemdatamismtomus.
Interceptionm-
mCORRECTmANSWERSmInterceptionmattacksmallowmunauthorizedmusersmtomaccessmourmdata,mapplic
ations,mormenvironmentsmandmaremprimarilymanmattackmagainstmconfidentiality.mInterceptionmmigh
tmtakemthemformmofmunauthorizedmfilemviewingmormcopying,meavesdroppingmonmphonemconversatio
ns,mormreadingme-
mail,mandmcanmbemconductedmagainstmdatamatmrestmorminmmotion.mProperlymexecuted,minterceptio
nmattacksmcanmbemverymdifficultmtomdetect.
AffectsmConfidentiality
, Interruptionm-
mCORRECTmANSWERSmInterruptionmattacksmcausemourmassetsmtombecomemunusablemormunavailabl
emformourmuse,monmamtemporarymormpermanentmbasis.mInterruptionmattacksmoftenmaffectmavailabilit
ymbutmcanmbemanmattackmonmintegritymasmwell.mInmthemcasemofmamDoSmattackmonmammailmserver,mwem
wouldmclassifymthismasmanmavailabilitymattack.
AffectsmIntegritymandmavailability
Modificationm-
mCORRECTmANSWERSmModificationmattacksminvolvemtamperingmwithmourmasset.mIfmwemaccessmamfil
eminmanmunauthorizedmmannermandmaltermthemdatamitmcontains,mwemhavemaffectedmthemintegritymof
mthemdatamcontainedminmthemfile.
Fabricationm-
mCORRECTmANSWERSmFabricationmattacksminvolvemgeneratingmdata,mprocesses,mcommunications,m
ormothermsimilarmactivitiesmwithmamsystem.mFabricationmattacksmprimarilymaffectmintegritymbutmcoul
dmbemconsideredmanmavailabilitymattackmasmwell.mIfmwemgeneratemspuriousminformationminmamdatab
ase,mthismwouldmbemconsideredmtombemamfabricationmattack.
AffectsmIntegritymandmAvailability
Threatm-mCORRECTmANSWERSmSomethingmthatmhasmpotentialmtomcausemharm
Vulnerabilitym-mCORRECTmANSWERSmWeaknessesmthatmcanmbemusedmtomharmmus
Riskm-mCORRECTmANSWERSmLikelinessmthatmsomethingmbadmwillmhappen
Impactm-mCORRECTmANSWERSmThemvaluemofmthemassetmismusedmtomassessmifmamriskmismpresent