Sscp Exams| 740 Questions| With Complete Solutions

What makes up the CIA triad? correct answer: Confidentiality Integrity Availability A term that refers to the minimum amount of people to perform a highly sensitive action. correct answer: M of N control multiple agents with the capability (M), and the minimum number of these agents (N) in order to perform the task where one person is required to complete each part of a task. Using the example of key escrow, one person might access the key contained in key escrow while a second person must decrypt the files using the retrieved key. And a third person may verify that each of the other two persons performed their actions correctly correct answer: separation of duties Access control which prevents one person from performing an action by separating each task i.e. two people needing to turn a key at same time in order to launch a missile correct answer: Two man rule Periodically changing roles to prevent one person from having full control of a critical position correct answer: Job rotation Spreading knowledge and experience across multiple workers to perform mission critical tasks correct answer: Cross training A term that describes the confidentiality of information in regards to peoples control over that information correct answer: privacy A term that describes the violation of non-repudiation correct answer: deniability an individual should only have enough access to perform their job effeciently correct answer: least priviledge Three categories of of security correct answer: prevention detection and recovery activities used to avoid a threat correct answer: prevention activities used to identify a threat correct answer: detection activities used to return operations to normal after an incident correct answer: recovery ensures an activity is performed correctly correct answer: due diligance created by government or by an industry specific group to control a process correct answer: regulatory agency examines products and approves them based on testing correct answer: ISO what are the three types of controls correct answer: physical logical administrative restrict access to physical components correct answer: Physical Access Control controls to keep digital threats at bay correct answer: Logical Access Contr