C836 Opening Exam Questions with 100%
Correct Answers.
first and most important step of operational security
identify our most critical information assets
threat
something that has the potential to cause harm to us
vulnerabilities
weaknesses that can be used to harm us
ex: security controls not very rigorous that can allow one to easily change source code
risk occurs when..
when we have a matching threat and vulnerability
deterrent controls
designed to discourage those who might seek to violate our security controls from doing so
deterrent examples
signs in public spaces that might indicate that video monitoring is in place, violations for
breaking the law..
detective
serve to detect and report undesirable events taking place
detective example
burglar alarms and physical intrusion detection systems
preventive controls
used to physically prevent unauthorized entities from breaching our physical security
, physical security example
simple mechanical lock or high fences
(RAID) redundant arrays of inexpensive disks
used to ensure we do
Magnetic Media
Hard drives, floppy drives and tape drives
sensitive to magnetic fields
flash media
sturdy and resilient
optical media
CDs and DVDs
sensitive to temperature and even scratching that can render media unusable
physical controls
locks, fences, cameras, security guards, lighting
more complex security measures, such as the use of iris scanners, mantraps, and identification
badges
administrative controls
background checks, periodic drug tests
main method of ensuring availability
backups like RAIDs
subnet
small network divided from a larger network
Correct Answers.
first and most important step of operational security
identify our most critical information assets
threat
something that has the potential to cause harm to us
vulnerabilities
weaknesses that can be used to harm us
ex: security controls not very rigorous that can allow one to easily change source code
risk occurs when..
when we have a matching threat and vulnerability
deterrent controls
designed to discourage those who might seek to violate our security controls from doing so
deterrent examples
signs in public spaces that might indicate that video monitoring is in place, violations for
breaking the law..
detective
serve to detect and report undesirable events taking place
detective example
burglar alarms and physical intrusion detection systems
preventive controls
used to physically prevent unauthorized entities from breaching our physical security
, physical security example
simple mechanical lock or high fences
(RAID) redundant arrays of inexpensive disks
used to ensure we do
Magnetic Media
Hard drives, floppy drives and tape drives
sensitive to magnetic fields
flash media
sturdy and resilient
optical media
CDs and DVDs
sensitive to temperature and even scratching that can render media unusable
physical controls
locks, fences, cameras, security guards, lighting
more complex security measures, such as the use of iris scanners, mantraps, and identification
badges
administrative controls
background checks, periodic drug tests
main method of ensuring availability
backups like RAIDs
subnet
small network divided from a larger network
