Questions and Answers
Updated Latest (Verified Answers)
1. Confidentiality
Answer Protection from unauthorized access
g g g g
2. integrity
Answer Protection from unauthorized modification
g g g g
3. Availability
Answer protection from disruptions in access
g g g g g
4. Cybersecurity
Answer the protection of information assets (digital assets) by addressing threats to informatio
g g g g g g g g g g g g
n processed, stored, and transported by internetworked infor- mation systems
g g g g g g g g g
5. NIST Functions to Protect Digital Assets IPDRR
g g g g g g
1) Identify
2) Protect
3) Detect
4) Respond
1g/g45
,5) Recover
6. Nonrepudiation
Answer Def ensuring that a message or other piece of information is genuine
g g g g g g g g g g g g
Examples digital signatures and transaction logs
g g g g g
7. Risk
Answer combination of the probability of an event and its consequences, mitigated through co
g g g g g g g g g g g g g
ntrols
8. Threat
Answer Anything that is capable of acting against an asset in a harmful manner
g g g g g g g g g g g g g
9. Asset
Answer something of either tangible or intangible value that is worth protecting
g g g g g g g g g g g
10. Vulnerability
Answer A weakness in the design, implementation, operation or internal control of a process t
g g g g g g g g g g g g g g
hat could expose the system to adverse threats from threat events
g g g g g g g g g g
11. Inherent risk g
Answer The risk level or exposure without taking into account the actions that management ha
g g g g g g g g g g g g g g
s taken or might take (e.g., implementing controls)
g g g g g g g
12. Residual risk g
Answer the risk that remains after management implements internal controls or some oth
g g g g g g g g g g g g
2g/g45
,er response to risk
g g g
13. Likelihood
Answer A.K.A probability
g g
measure of frequency of which an event may occur, which depends on the threat and vulnerabi
g g g g g g g g g g g g g g g
lity
14. Approaches to Cybersecurity Risk g g g
Answer Dependent on g g
1) Risk tolerance
g
2) Size & scope of the environment
g g g g g
3) Amount of data available
g g g
Approaches
1) Ad hoc
g
3g/g45
, 2) Compliance-based
3) Risk-based
15. Threat Agents g
Answer The actors causing the threats that might exploit a vulnerability
g g g g g g g g g g
Types
1) Corporations - competitive advantage
g g g
2) Cybercriminals - profit g g
3) Cyberterrorists - critical infrastructures/government
g g g
4) Cyberwarriors - politically motivated g g g
5) Employees - revenge g g
6) Hacktivists - politically motivated
g g g
7) Nation states - government/private entities
g g g g
8) Online social hackers - identity theft, profit
g g g g g g
9) Script kiddies - learning to hack
g g g g g
16. Attack vector g
Answer The path or route used to gain access to the target (asset)
g g g g g g g g g g g g
Types
1) Ingress - intrusion
g g
4g/g45