FunsInformation Security - C836 Pre-
as as as as
Assessment Exam Questions With Correct Answers.
as as as as as
Protectsasinformationasandasinformationassystemsasfromasunauthorizedasaccess,asuse,asdis
closure,asdisruption,asmodification,asorasdestructionas-
as correctasansweras✔✔InformationasSecurity
Companiesasthatasprocessascreditascardaspaymentsasmustascomplyaswithasthisassetasofassta
ndardsas-ascorrectasansweras✔✔
PaymentasCardasIndustryasDataasSecurityasStandardas(PCIasDSS)
Usedastoaskeepassomethingasprivateasorasminimallyasknownas-ascorrectasansweras✔✔
Confidentiality
Refersastoastheasabilityastoaspreventasourasdataasfromasbeingaschangedasinasanasunauthorize
dasorasundesiredasmanner.as-ascorrectasansweras✔✔Integrity
Refersastoastheasabilityastoasaccessasourasdataaswhenasweasneedasitas-ascorrectasansweras✔
✔Availability
Aastypeasofasattack,asprimarilyasagainstasconfidentialityas-ascorrectasansweras✔✔
Interception
Somethingasthatashasastheaspotentialastoascauseasharmastoasourasassetsas-
as correctasansweras✔✔Threat
Aasweaknessasthatascanasbeasusedastoasharmasusas-ascorrectasansweras✔✔Vulnerability
,Theaslikelihoodasthatassomethingasbadaswillashappenas-ascorrectasansweras✔✔Risk
Anasattackasthatascausesasourasassetsastoasbecomeasunusableasorasunavailableasforasourasu
se,asonasaastemporaryasoraspermanantasbasisas-ascorrectasansweras✔✔Interruptionasattack
Anasattackasthatasinvolvesastamperingaswithasourasassetsas-ascorrectasansweras✔✔
Modificationasattack
AasmodelasthatasaddsasthreeasmoreasprinciplesastoastheasCIAastriad:aspossessionasorascontro
l,asutility,asandasauthenticityas-ascorrectasansweras✔✔Parkerianashexad
Theasphysicalasdispositionasofastheasmediaasonaswhichastheasdataasisasstoredas-
as correctasansweras✔✔Possessionasorascontrol
Allowsasforasattributionasasastoastheasownerasorascreatorasofastheasdataasinasquestionas-
as correctasansweras✔✔Authenticity
Refersastoashowasusefulastheasdataasisastoasusas-ascorrectasansweras✔✔Utility
Anasattackasthatasinvolvesasgeneratingasdata,asprocesses,ascommunications,asorasotherassi
milarasactivitiesaswithasaassystemas-ascorrectasansweras✔✔Fabricationasattack
Oneasofastheasfirstasandasmostasimportantasstepsasofastheasriskasmanagementasprocessas-
as correctasansweras✔✔Identifyasassets
Aasmultilayeredasdefenseasthataswillasallowasusastoasachieveasaassuccessfulasdefenseasshoul
dasoneasorasmoreasofasourasdefenseasmeasuresasfailas-ascorrectasansweras✔✔
Defenseasinasdepth
, """Basedasonasrules,aslaws,aspolicies,asprocedures,asguidelines,asandasotherasitemsasthatasa
reas""paper""asinasnature"""as-ascorrectasansweras✔✔Administrativeascontrols
Sometimesascalledastechnicalascontrols,astheseasprotectastheassystems,asnetworks,asandase
nvironmentsasthatasprocess,astransmit,asandasstoreasourasdataas-ascorrectasansweras✔✔
Logicalascontrols
Controlsasthatasprotectastheasphysicalasenvironmentasinaswhichasourassystemsassit,asoraswhe
reasourasdataasisasstoredas-ascorrectasansweras✔✔Physicalascontrols
Involvesasputtingasmeasuresasinasplaceastoashelpasensureasthatasaasgivenastypeasofasthreatasi
sasaccountedasforas-ascorrectasansweras✔✔MitigatingasRisk
Theasriskasmanagementasphaseasthatasconsistsasofasallasofastheasactivitiesasthatasweascanasp
erformasinasadvanceasofastheasincidentasitself,asinasorderastoasbetterasenableasusastoashandlea
it - correctasansweras✔✔Preparationasphase
s as as
Theasriskasmanagementasphaseaswhereasweasdetectastheasoccurenceasofasanasissueasandas
decideaswheterasitasisasactuallyasanasincidentassoasthatasweascanasrespondastoasitasappropriat
elyas-ascorrectasansweras✔✔Detectionasandasanalysisasphase
Theasriskasmanagementasphaseaswhereasweasdetermineasspecificallyaswhatashappened,asw
hyasitashappened,asandaswhatasweascanasdoastoaskeepasitasfromashappeningasagainas-
as correctasansweras✔✔Post-incidentasactivityasphase
Toascompletelyasremoveastheaseffectsasofastheasissueasfromasourasenvironmentas-
as correctasansweras✔✔Eradication
as as as as
Assessment Exam Questions With Correct Answers.
as as as as as
Protectsasinformationasandasinformationassystemsasfromasunauthorizedasaccess,asuse,asdis
closure,asdisruption,asmodification,asorasdestructionas-
as correctasansweras✔✔InformationasSecurity
Companiesasthatasprocessascreditascardaspaymentsasmustascomplyaswithasthisassetasofassta
ndardsas-ascorrectasansweras✔✔
PaymentasCardasIndustryasDataasSecurityasStandardas(PCIasDSS)
Usedastoaskeepassomethingasprivateasorasminimallyasknownas-ascorrectasansweras✔✔
Confidentiality
Refersastoastheasabilityastoaspreventasourasdataasfromasbeingaschangedasinasanasunauthorize
dasorasundesiredasmanner.as-ascorrectasansweras✔✔Integrity
Refersastoastheasabilityastoasaccessasourasdataaswhenasweasneedasitas-ascorrectasansweras✔
✔Availability
Aastypeasofasattack,asprimarilyasagainstasconfidentialityas-ascorrectasansweras✔✔
Interception
Somethingasthatashasastheaspotentialastoascauseasharmastoasourasassetsas-
as correctasansweras✔✔Threat
Aasweaknessasthatascanasbeasusedastoasharmasusas-ascorrectasansweras✔✔Vulnerability
,Theaslikelihoodasthatassomethingasbadaswillashappenas-ascorrectasansweras✔✔Risk
Anasattackasthatascausesasourasassetsastoasbecomeasunusableasorasunavailableasforasourasu
se,asonasaastemporaryasoraspermanantasbasisas-ascorrectasansweras✔✔Interruptionasattack
Anasattackasthatasinvolvesastamperingaswithasourasassetsas-ascorrectasansweras✔✔
Modificationasattack
AasmodelasthatasaddsasthreeasmoreasprinciplesastoastheasCIAastriad:aspossessionasorascontro
l,asutility,asandasauthenticityas-ascorrectasansweras✔✔Parkerianashexad
Theasphysicalasdispositionasofastheasmediaasonaswhichastheasdataasisasstoredas-
as correctasansweras✔✔Possessionasorascontrol
Allowsasforasattributionasasastoastheasownerasorascreatorasofastheasdataasinasquestionas-
as correctasansweras✔✔Authenticity
Refersastoashowasusefulastheasdataasisastoasusas-ascorrectasansweras✔✔Utility
Anasattackasthatasinvolvesasgeneratingasdata,asprocesses,ascommunications,asorasotherassi
milarasactivitiesaswithasaassystemas-ascorrectasansweras✔✔Fabricationasattack
Oneasofastheasfirstasandasmostasimportantasstepsasofastheasriskasmanagementasprocessas-
as correctasansweras✔✔Identifyasassets
Aasmultilayeredasdefenseasthataswillasallowasusastoasachieveasaassuccessfulasdefenseasshoul
dasoneasorasmoreasofasourasdefenseasmeasuresasfailas-ascorrectasansweras✔✔
Defenseasinasdepth
, """Basedasonasrules,aslaws,aspolicies,asprocedures,asguidelines,asandasotherasitemsasthatasa
reas""paper""asinasnature"""as-ascorrectasansweras✔✔Administrativeascontrols
Sometimesascalledastechnicalascontrols,astheseasprotectastheassystems,asnetworks,asandase
nvironmentsasthatasprocess,astransmit,asandasstoreasourasdataas-ascorrectasansweras✔✔
Logicalascontrols
Controlsasthatasprotectastheasphysicalasenvironmentasinaswhichasourassystemsassit,asoraswhe
reasourasdataasisasstoredas-ascorrectasansweras✔✔Physicalascontrols
Involvesasputtingasmeasuresasinasplaceastoashelpasensureasthatasaasgivenastypeasofasthreatasi
sasaccountedasforas-ascorrectasansweras✔✔MitigatingasRisk
Theasriskasmanagementasphaseasthatasconsistsasofasallasofastheasactivitiesasthatasweascanasp
erformasinasadvanceasofastheasincidentasitself,asinasorderastoasbetterasenableasusastoashandlea
it - correctasansweras✔✔Preparationasphase
s as as
Theasriskasmanagementasphaseaswhereasweasdetectastheasoccurenceasofasanasissueasandas
decideaswheterasitasisasactuallyasanasincidentassoasthatasweascanasrespondastoasitasappropriat
elyas-ascorrectasansweras✔✔Detectionasandasanalysisasphase
Theasriskasmanagementasphaseaswhereasweasdetermineasspecificallyaswhatashappened,asw
hyasitashappened,asandaswhatasweascanasdoastoaskeepasitasfromashappeningasagainas-
as correctasansweras✔✔Post-incidentasactivityasphase
Toascompletelyasremoveastheaseffectsasofastheasissueasfromasourasenvironmentas-
as correctasansweras✔✔Eradication
