Security Management Exam #1 -
Chapter 1 questions n correct answers
Accountability - correct answer ✔✔ The access control mechanism that ensures all actions on a
system - authorized or unauthorized - can be attributed to an authenticated identity. Also
known as auditability.
Authentication - correct answer ✔✔ The access control mechanism that requires the validation
and verification of an unauthenticated entity's purported identity.
Authorization - correct answer ✔✔ The access control mechanism represents the matching of
an authenticated entity to a list of information assets and corresponding access levels.
Disclosure - correct answer ✔✔ In Information security, the intentional and unintentional
exposure of an information asset to unauthorized parties.
Identification - correct answer ✔✔ The access control mechanism whereby unverified entities
who seek access to a resource provide a label by which they are known to the system.
Information Aggregation - correct answer ✔✔ The collection and combination of pieces of
nonprivate data, which could result in information that violates privacy. Not to be confused with
aggregate information.
Privacy - correct answer ✔✔ In the context of Information security, the right of individuals or
groups to protect themselves and their information from unauthorized access, providing
confidentiality.
, Attack (Threat Event) - correct answer ✔✔ An intentional or unintentional act that can damage
or otherwise compromise information and the systems that support it.
Exploit - correct answer ✔✔ A technique used to compromise a system.
Loss - correct answer ✔✔ A single instance of an information asset suffering damage or
destruction, unintended or unauthorized modification or disclosure, or denial of use.
Threat (Used Interchangeably with Threat Sources) - correct answer ✔✔ An event or
circumstance that has the potential to adversely affect operations and assets.
Threat Agent - correct answer ✔✔ The specific instance or component of a threat.
Vulnerability - correct answer ✔✔ A potential weakness in an asset or its defensive control
systems.
Availability Disruption - correct answer ✔✔ An interruption in service, usually from a service
provider, which causes an adverse event within an organization.
Blackout - correct answer ✔✔ A long-term interruption (outage) in electrical power availability.
Brownout - correct answer ✔✔ A long-term decrease in electrical power availability.
Fault - correct answer ✔✔ A short-term interruption in electrical power availability.
Noise - correct answer ✔✔ The presence of additional and disruptive signals in network
communications or electrical power delivery.
Chapter 1 questions n correct answers
Accountability - correct answer ✔✔ The access control mechanism that ensures all actions on a
system - authorized or unauthorized - can be attributed to an authenticated identity. Also
known as auditability.
Authentication - correct answer ✔✔ The access control mechanism that requires the validation
and verification of an unauthenticated entity's purported identity.
Authorization - correct answer ✔✔ The access control mechanism represents the matching of
an authenticated entity to a list of information assets and corresponding access levels.
Disclosure - correct answer ✔✔ In Information security, the intentional and unintentional
exposure of an information asset to unauthorized parties.
Identification - correct answer ✔✔ The access control mechanism whereby unverified entities
who seek access to a resource provide a label by which they are known to the system.
Information Aggregation - correct answer ✔✔ The collection and combination of pieces of
nonprivate data, which could result in information that violates privacy. Not to be confused with
aggregate information.
Privacy - correct answer ✔✔ In the context of Information security, the right of individuals or
groups to protect themselves and their information from unauthorized access, providing
confidentiality.
, Attack (Threat Event) - correct answer ✔✔ An intentional or unintentional act that can damage
or otherwise compromise information and the systems that support it.
Exploit - correct answer ✔✔ A technique used to compromise a system.
Loss - correct answer ✔✔ A single instance of an information asset suffering damage or
destruction, unintended or unauthorized modification or disclosure, or denial of use.
Threat (Used Interchangeably with Threat Sources) - correct answer ✔✔ An event or
circumstance that has the potential to adversely affect operations and assets.
Threat Agent - correct answer ✔✔ The specific instance or component of a threat.
Vulnerability - correct answer ✔✔ A potential weakness in an asset or its defensive control
systems.
Availability Disruption - correct answer ✔✔ An interruption in service, usually from a service
provider, which causes an adverse event within an organization.
Blackout - correct answer ✔✔ A long-term interruption (outage) in electrical power availability.
Brownout - correct answer ✔✔ A long-term decrease in electrical power availability.
Fault - correct answer ✔✔ A short-term interruption in electrical power availability.
Noise - correct answer ✔✔ The presence of additional and disruptive signals in network
communications or electrical power delivery.
