Confidentiality - ANSWER Ensures that the data is only viewable by authorized users.
Encryption but Access controls and steganography also help - ANSWER What is the
best choice to provide confidentiality?
Integrity - ANSWER Provides assurance that data has not been modified, tampered
with or corrupted through unauthorized or unintended changes. Hashing is a common
method of this.
What does non-repudiation prevent? - ANSWER Prevents entities from denying they
took action. Digital signatures and audit logs provide this
Avabailability - ANSWER ensures that data and services are available when needed. A
common goal of this is to remove single points of failure.
What are some methods used to increase or maintain availability ? - ANSWER fault
tolerance, fail over clusters, load balancing, backups, virtualizations, HVAC systems, and
generators
Safety - ANSWER includes the safety of resources using physical security methods
such as fencing, lighting, door locks, and CCTV systems. Can also include personnel and
include escape plans, escape routes, and drills.
Layered Security - ANSWER employs multiple layers of security to protect against
threats. I.e. firewall, an intrusion detection system, content filtering and antivirus software.
1
, Risk - ANSWER the possibility of a threat exploiting a vulnerability and resulting in a
loss
Threat - ANSWER any circumstance or event that has the potential to compromise
confidentiality, integrity and availability
Vulnerability - ANSWER a weakness
Risk Mitigation - ANSWER Reduces risk by reducing the chances that a threat will
exploit a vulnerability or by reducing the impact of the risk
Authentication - ANSWER Allows entities to prove their identity by using credentials
known to another entity. It occurs when an entity provides proof of an identity (such as a
password).
Something you know
Something you have
Something you are
Somewhere you are
something you do - ANSWER Five factors of Authentication are:
Something you know - ANSWER typically refers to a shared secret, such as a password
or a PIN. This is the least secure form of authentication
Smart Cards - ANSWER credit-sized cards that have embedded certificates used for
authentication. They require a public key infrastructure (PKI) to issue certificates
Single-factor authentication - ANSWER includes one or more authentication methods
in the same factor, such as a PIN and a password
2
Encryption but Access controls and steganography also help - ANSWER What is the
best choice to provide confidentiality?
Integrity - ANSWER Provides assurance that data has not been modified, tampered
with or corrupted through unauthorized or unintended changes. Hashing is a common
method of this.
What does non-repudiation prevent? - ANSWER Prevents entities from denying they
took action. Digital signatures and audit logs provide this
Avabailability - ANSWER ensures that data and services are available when needed. A
common goal of this is to remove single points of failure.
What are some methods used to increase or maintain availability ? - ANSWER fault
tolerance, fail over clusters, load balancing, backups, virtualizations, HVAC systems, and
generators
Safety - ANSWER includes the safety of resources using physical security methods
such as fencing, lighting, door locks, and CCTV systems. Can also include personnel and
include escape plans, escape routes, and drills.
Layered Security - ANSWER employs multiple layers of security to protect against
threats. I.e. firewall, an intrusion detection system, content filtering and antivirus software.
1
, Risk - ANSWER the possibility of a threat exploiting a vulnerability and resulting in a
loss
Threat - ANSWER any circumstance or event that has the potential to compromise
confidentiality, integrity and availability
Vulnerability - ANSWER a weakness
Risk Mitigation - ANSWER Reduces risk by reducing the chances that a threat will
exploit a vulnerability or by reducing the impact of the risk
Authentication - ANSWER Allows entities to prove their identity by using credentials
known to another entity. It occurs when an entity provides proof of an identity (such as a
password).
Something you know
Something you have
Something you are
Somewhere you are
something you do - ANSWER Five factors of Authentication are:
Something you know - ANSWER typically refers to a shared secret, such as a password
or a PIN. This is the least secure form of authentication
Smart Cards - ANSWER credit-sized cards that have embedded certificates used for
authentication. They require a public key infrastructure (PKI) to issue certificates
Single-factor authentication - ANSWER includes one or more authentication methods
in the same factor, such as a PIN and a password
2
