C845 Information Systems Security:
Chapter 1 Exam UPDATED QUESTIONS
AND CORRECT ANSWERS
Confidentiality - CORRECT ANSWER Limits are placed on who is allowed to view the
information, including copying it to another form.
Integrity - CORRECT ANSWER The information stays complete and correct when retrieved,
displayed, or acted upon.
Availability - CORRECT ANSWER The information is presented to the user in a timely
manner when required and in a form and format that meets the user's needs.
Authenticity - CORRECT ANSWER Only previously approved, known, and trusted users or
processes have been able to create, modify, move, or copy the information.
Utility - CORRECT ANSWER The content of the information, its form and content, and its
presentation or delivery to the user meet the user's needs.
Possesion or Control - CORRECT ANSWER The information is legally owned or held by a
known, authorized user, such that the user has authority to exert control over its use, access,
modification, or movement.
Safety - CORRECT ANSWER The system and its information, by design, do not cause
unauthorized hard or damage to others, their property, or their lives.
Privacy - CORRECT ANSWER Information that attests to or relates to the identity of a person,
or links specific activities to that identity, but must me protected from being accessed, viewed, copied,
modified, or otherwise used by unauthorized persons or systems.
Nonrepudiation - CORRECT ANSWER Users who created, used, viewed, or accessed the
information, or shared it with others, cannot later deny that they did so.
, Transparency - CORRECT ANSWER The information can be reviewed, audited, and made
visible or shared with competent authorities for regulatory, legal, or other processes that serve the
public good.
CIA Triad - CORRECT ANSWER Confidentiality, Integrity, and Availability.
CIANA - CORRECT ANSWER Combines Confidentiality, Integrity, Availability,
Nonrepudiation, and Authentication.
CIANA+PS - CORRECT ANSWER Expands CIANA to include Privacy and Safety.
Parkerian Hexad - CORRECT ANSWER Includes confidentiality, integrity, availability,
authenticity, utility, and possession or control.
Intellectual Property - CORRECT ANSWER The ideas that we create and express in tangible,
explicit form; in creating them, we create an ownership interest.
Patent - CORRECT ANSWER Public Disclosure - Mandatory, Detailed. Monetized By -
License to use. Compromise by - failure to develop or monetize; failure to defend against
infringement.
Copyright - CORRECT ANSWER Public Disclosure - Published Works. Monetize by - Sell
copies. Compromise by - failure to defend.
Trademark - CORRECT ANSWER Public Disclosure - Logos, Signs, Product Stampings.
Monetize by - Create brand awareness in marketplace. Compromise by - failure to defend.
Trade Secret - CORRECT ANSWER Public Disclosure - Must me undisclosed. Monetize by -
Sell products and services based on its use; can be licensed. Compromise by - failure to keep secret or
defend.
The Security Triad - CORRECT ANSWER Confidentiality - Protects information and systems
from unauthorized use. Integrity - Protects information and systems from unauthorized modification.
Availability - ensures that information and systems for authorized users are available when needed.
Chapter 1 Exam UPDATED QUESTIONS
AND CORRECT ANSWERS
Confidentiality - CORRECT ANSWER Limits are placed on who is allowed to view the
information, including copying it to another form.
Integrity - CORRECT ANSWER The information stays complete and correct when retrieved,
displayed, or acted upon.
Availability - CORRECT ANSWER The information is presented to the user in a timely
manner when required and in a form and format that meets the user's needs.
Authenticity - CORRECT ANSWER Only previously approved, known, and trusted users or
processes have been able to create, modify, move, or copy the information.
Utility - CORRECT ANSWER The content of the information, its form and content, and its
presentation or delivery to the user meet the user's needs.
Possesion or Control - CORRECT ANSWER The information is legally owned or held by a
known, authorized user, such that the user has authority to exert control over its use, access,
modification, or movement.
Safety - CORRECT ANSWER The system and its information, by design, do not cause
unauthorized hard or damage to others, their property, or their lives.
Privacy - CORRECT ANSWER Information that attests to or relates to the identity of a person,
or links specific activities to that identity, but must me protected from being accessed, viewed, copied,
modified, or otherwise used by unauthorized persons or systems.
Nonrepudiation - CORRECT ANSWER Users who created, used, viewed, or accessed the
information, or shared it with others, cannot later deny that they did so.
, Transparency - CORRECT ANSWER The information can be reviewed, audited, and made
visible or shared with competent authorities for regulatory, legal, or other processes that serve the
public good.
CIA Triad - CORRECT ANSWER Confidentiality, Integrity, and Availability.
CIANA - CORRECT ANSWER Combines Confidentiality, Integrity, Availability,
Nonrepudiation, and Authentication.
CIANA+PS - CORRECT ANSWER Expands CIANA to include Privacy and Safety.
Parkerian Hexad - CORRECT ANSWER Includes confidentiality, integrity, availability,
authenticity, utility, and possession or control.
Intellectual Property - CORRECT ANSWER The ideas that we create and express in tangible,
explicit form; in creating them, we create an ownership interest.
Patent - CORRECT ANSWER Public Disclosure - Mandatory, Detailed. Monetized By -
License to use. Compromise by - failure to develop or monetize; failure to defend against
infringement.
Copyright - CORRECT ANSWER Public Disclosure - Published Works. Monetize by - Sell
copies. Compromise by - failure to defend.
Trademark - CORRECT ANSWER Public Disclosure - Logos, Signs, Product Stampings.
Monetize by - Create brand awareness in marketplace. Compromise by - failure to defend.
Trade Secret - CORRECT ANSWER Public Disclosure - Must me undisclosed. Monetize by -
Sell products and services based on its use; can be licensed. Compromise by - failure to keep secret or
defend.
The Security Triad - CORRECT ANSWER Confidentiality - Protects information and systems
from unauthorized use. Integrity - Protects information and systems from unauthorized modification.
Availability - ensures that information and systems for authorized users are available when needed.
