D430 Exam Questions & Answers(SCORED A+)

What is information security -ANSWER -A state of data -Action that an org. needs to take -Practices against threats (unknown/unnamed) IS is keeping 1,2,3 secure against 1-6 -ANSWER keeping data/SW/HW secure against unauthorized access/use/disclosure/disruption/modification/destruction Assets are protected by their value to the org. in what order? -ANSWER People Data HW/SW Compliance -ANSWER The requirements set by laws and industry regulations EX: HIPPA, FISMA HIPPA/HITECH -ANSWER Healthcare industry PCI DSS -ANSWER Payment Card Industry Data Security Standard FISMA -ANSWER Federal government security requirements CIA -ANSWER Confidentiality, Integrity, Availability Confidentiality -ANSWER Allowing only authorized users access to data Integrity -ANSWER Keeping data unaltered by accidental/malicious intent Availability -ANSWER Ability to access data when needed Parkerian Hexad -ANSWER CIA + possession/control, authenticity, utility Possession/control (parkerian hexad) -ANSWER the physical disposition of the media on which the data is stored; enabling you to discuss the loss of data in the physical sense. ex; an encrypted hard-drive is stolen, it is considered a loss of THIS because you no longer physically have the hard-drive. authenticity (parkerian hexad) -ANSWER Allows you to say whether you've attributed the data in question to the proper owner or creator ex; if something is altered to appear to have come from someone other than the proper owner or creator, then it violates THIS. utility (parkerian hexad) -ANSWER How useful the data is to you. ex; for an attacker, encrypted data would be of very little use as it's unreadable, unencrypted data would be useful because it's readable. m; is not necessarily binary and can have varying degrees of usefulness, depending on the data and format. Types of attacks -ANSWER Interception, Interruption, Modification, Fabrication Interception -ANSWER Allows unauthorized users to access (intercept) our data/apps/environments. Confidentiality