INFOSEC STUDY EXAMS ALL GUIDE QUESTIONS
AND ANSWERS SURE A+
✔✔Risk Management - ✔✔-Risk avoidance
-Risk transference
-Risk mitigation
-Risk deterrence
-Risk acceptance
✔✔Threat - ✔✔an object, person, or other entity that represents a constant danger to
an asset
✔✔Threat Agents (Actors) - ✔✔used to indicate an individual or group that can manifest
a threat
✔✔Acts of Human Error or Failure - ✔✔includes acts done without malicious intent
caused by inexperience, improper training, incorrect assumptions & other
circumstances
employees are greatest threats to information security - they are closest to the
organizational data
, employee mistakes can easily lead to revelation of classified data, accidental deletion or
modification of data or failure to protect information
✔✔Vulnerability - ✔✔-a weakness that could be exploited by a threat
-an identified weakness of a controlled system whose controls are not present or are no
longer effective
✔✔Attacks - ✔✔-a weakness that could be exploited by a threat
-an information security threat that involves an attempt to obtain, alter, destroy, remove,
implant or reveal information without authorized access or permission
✔✔Attack Vector - ✔✔-a path or means by which a hacker (or cracker) can gain access
to a computer or network server in order to deliver a payload or malicious outcome
-enables hackers to exploit system vulnerabilities, including the human element
✔✔Controls - ✔✔-Types of Controls
countermeasures that you need to put in place to avoid, mitigate, or counteract security
risks due to threats or attacks
✔✔Types of Controls - ✔✔-Prevention
-Detection
-Correction
✔✔The CIA Triad - ✔✔a model designed to guide policies for information security within
an organization
✔✔Non-repudiation - ✔✔-a service that provides proof of the integrity and origin of data
-the assurance that someone cannot deny the validity of something
✔✔Identification - ✔✔means finding out who someone is
✔✔Authentication - ✔✔a mechanism of verifying that identification
✔✔Authentication Factors - ✔✔Something you are:
-Fingerprints, handprints, or retinal patterns
Something you have
Key or ID card:
-Something you know:
Password or PIN
AND ANSWERS SURE A+
✔✔Risk Management - ✔✔-Risk avoidance
-Risk transference
-Risk mitigation
-Risk deterrence
-Risk acceptance
✔✔Threat - ✔✔an object, person, or other entity that represents a constant danger to
an asset
✔✔Threat Agents (Actors) - ✔✔used to indicate an individual or group that can manifest
a threat
✔✔Acts of Human Error or Failure - ✔✔includes acts done without malicious intent
caused by inexperience, improper training, incorrect assumptions & other
circumstances
employees are greatest threats to information security - they are closest to the
organizational data
, employee mistakes can easily lead to revelation of classified data, accidental deletion or
modification of data or failure to protect information
✔✔Vulnerability - ✔✔-a weakness that could be exploited by a threat
-an identified weakness of a controlled system whose controls are not present or are no
longer effective
✔✔Attacks - ✔✔-a weakness that could be exploited by a threat
-an information security threat that involves an attempt to obtain, alter, destroy, remove,
implant or reveal information without authorized access or permission
✔✔Attack Vector - ✔✔-a path or means by which a hacker (or cracker) can gain access
to a computer or network server in order to deliver a payload or malicious outcome
-enables hackers to exploit system vulnerabilities, including the human element
✔✔Controls - ✔✔-Types of Controls
countermeasures that you need to put in place to avoid, mitigate, or counteract security
risks due to threats or attacks
✔✔Types of Controls - ✔✔-Prevention
-Detection
-Correction
✔✔The CIA Triad - ✔✔a model designed to guide policies for information security within
an organization
✔✔Non-repudiation - ✔✔-a service that provides proof of the integrity and origin of data
-the assurance that someone cannot deny the validity of something
✔✔Identification - ✔✔means finding out who someone is
✔✔Authentication - ✔✔a mechanism of verifying that identification
✔✔Authentication Factors - ✔✔Something you are:
-Fingerprints, handprints, or retinal patterns
Something you have
Key or ID card:
-Something you know:
Password or PIN
