Cybersecurity Study Guide | Security
Concepts, Controls & Core Principles
Page 1 of 36 Cybersecurity Study Guide _ Security Concepts,
Cybersecurity
Controls
Study
& Core
GuidePrinciples.pdf
_ Security Concepts, Controls & Core Principles
,Page 2 of 36 Comprehensive Security Concepts and Controls for Cybersecurity.pdf 2 of 36
What is the primary focus of information security?
Protecting sensitive data and communications.
What are security controls?
Measures implemented to protect assets from threats.
What is an asset in the context of security?
Anything of value to an organization, including data, employees, and physical property.
Page 2 of 36 Comprehensive Security Concepts and Controls for Cybersecurity.pdf Comprehensive Security Concepts and Controls for Cybersecurity
,Page 3 of 36 Comprehensive Security Concepts and Controls for Cybersecurity.pdf 3 of 36
Define a threat in security terms.
Anything that can harm an asset, including malicious attacks and accidental data loss.
What is the CIA triad?
A model that outlines the core goals of cybersecurity: Confidentiality, Integrity, and
Availability.
What does confidentiality ensure?
Information is viewable only by authorized users and inaccessible to unauthorized users.
Page 3 of 36 Comprehensive Security Concepts and Controls for Cybersecurity.pdf Comprehensive Security Concepts and Controls for Cybersecurity
, Page 4 of 36 Comprehensive Security Concepts and Controls for Cybersecurity.pdf 4 of 36
What is meant by integrity in cybersecurity?
Ensuring that information remains accurate and complete over its entire lifetime.
What does availability refer to in the context of information security?
Ensuring that information is always easily accessible to authorized users.
What is authenticity in cybersecurity?
The ability to verify the source of information and its integrity.
Define non-repudiation.
A principle that ensures the source of information cannot dispute its authorship or contents.
Page 4 of 36 Comprehensive Security Concepts and Controls for Cybersecurity.pdf Comprehensive Security Concepts and Controls for Cybersecurity