True or False? People can be threat agents in some cases, but trustworthy in others.
Give this one a try later!
True
Cyber vulnerabilities became a public issue in the __________ as new internet users
struggled to understand the technology's risks.
Give this one a try later!
1990s
, Section 1.6.2 outlines a procedure for disclosing security vulnerabilities in a
commercial device or product. Assume that we have discovered a vulnerability in a
commercial product. The vendor has not acknowledged our initial vulnerability report
or communicated with us in any other way. They have not announced the vulnerability
to the public. We wish to warn the public of the vulnerability as soon as is ethically
defensible. Given the procedure in Section 1.6.2, which of the following is the best
course of action?
Give this one a try later!
After 30 days, announce that the vulnerability exists, and describe how to
reduce a system's risk of attack through that vulnerability.
A security analyst is performing a security assessment. The analyst should not:
Correct!
Give this one a try later!
take actions to mitigate a serious risk.
The character that separates directories in a Windows directory path is:
Give this one a try later!
the back slash (\)
Alice is using a system that uses very simple file and directory access rights. The
system doesn't have directory-specific access rights. Instead, it uses simple read and
Give this one a try later!
True
Cyber vulnerabilities became a public issue in the __________ as new internet users
struggled to understand the technology's risks.
Give this one a try later!
1990s
, Section 1.6.2 outlines a procedure for disclosing security vulnerabilities in a
commercial device or product. Assume that we have discovered a vulnerability in a
commercial product. The vendor has not acknowledged our initial vulnerability report
or communicated with us in any other way. They have not announced the vulnerability
to the public. We wish to warn the public of the vulnerability as soon as is ethically
defensible. Given the procedure in Section 1.6.2, which of the following is the best
course of action?
Give this one a try later!
After 30 days, announce that the vulnerability exists, and describe how to
reduce a system's risk of attack through that vulnerability.
A security analyst is performing a security assessment. The analyst should not:
Correct!
Give this one a try later!
take actions to mitigate a serious risk.
The character that separates directories in a Windows directory path is:
Give this one a try later!
the back slash (\)
Alice is using a system that uses very simple file and directory access rights. The
system doesn't have directory-specific access rights. Instead, it uses simple read and
