Security Management Exam 1
questions and correct answers
Subjects - correct answer ✔✔ the user or process requesting access to a protected resource
Objects - correct answer ✔✔ the protected resource
Confidentiality - correct answer ✔✔ keeping information protected from unauthorized access;
relies on Integrity;
necessary, but not sufficient; MOST IMPORTANT GOAL for government agencies
Confidentiality Violations - correct answer ✔✔ -Capturing network traffic/Eavesdropping
-Social engineering
-port scanning
-shoulder surfing
Integrity - correct answer ✔✔ information can only be modified by authorized subjects; info is
protected from "honest mistakes";
dependent on confidentiality
Information is _____, ______, and _______ - correct answer ✔✔ valid, consistent, and
verifiable
Integrity Violations - correct answer ✔✔ Viruses, "logic bombs", sabotage
, Availability - correct answer ✔✔ information is timely and accessible to subjects; handles
interruptions and outages; dependent on confidentiality & integrity; most important goal for
business organizations
Availability Violations - correct answer ✔✔ attacks (denial of service), device failure,
environmental issues
Agility - correct answer ✔✔ "the capability to change with managed cost and speed"
Westerman and Hester;
CIA Triad + 1 - correct answer ✔✔ could affect: developing countermeasures, availability
Privacy - correct answer ✔✔ freedom from being observed, monitored, or examined without
consent or knowledge
Company Monitoring - correct answer ✔✔ 4th amendment rights
Accountability - correct answer ✔✔ the capability to prove a subject's identity and track their
activities
Nonrepudiation - correct answer ✔✔ ensures that the subject of an activity or event cannot
deny that the current occurred
Data Classification - correct answer ✔✔ a realistic means of securing data based on its "value"
Data value is useful for: - correct answer ✔✔ -determining where best to deploy security
resources
-establishing access control and rights
-implementing procedures for data dissemination, maturation, storage, disposal
questions and correct answers
Subjects - correct answer ✔✔ the user or process requesting access to a protected resource
Objects - correct answer ✔✔ the protected resource
Confidentiality - correct answer ✔✔ keeping information protected from unauthorized access;
relies on Integrity;
necessary, but not sufficient; MOST IMPORTANT GOAL for government agencies
Confidentiality Violations - correct answer ✔✔ -Capturing network traffic/Eavesdropping
-Social engineering
-port scanning
-shoulder surfing
Integrity - correct answer ✔✔ information can only be modified by authorized subjects; info is
protected from "honest mistakes";
dependent on confidentiality
Information is _____, ______, and _______ - correct answer ✔✔ valid, consistent, and
verifiable
Integrity Violations - correct answer ✔✔ Viruses, "logic bombs", sabotage
, Availability - correct answer ✔✔ information is timely and accessible to subjects; handles
interruptions and outages; dependent on confidentiality & integrity; most important goal for
business organizations
Availability Violations - correct answer ✔✔ attacks (denial of service), device failure,
environmental issues
Agility - correct answer ✔✔ "the capability to change with managed cost and speed"
Westerman and Hester;
CIA Triad + 1 - correct answer ✔✔ could affect: developing countermeasures, availability
Privacy - correct answer ✔✔ freedom from being observed, monitored, or examined without
consent or knowledge
Company Monitoring - correct answer ✔✔ 4th amendment rights
Accountability - correct answer ✔✔ the capability to prove a subject's identity and track their
activities
Nonrepudiation - correct answer ✔✔ ensures that the subject of an activity or event cannot
deny that the current occurred
Data Classification - correct answer ✔✔ a realistic means of securing data based on its "value"
Data value is useful for: - correct answer ✔✔ -determining where best to deploy security
resources
-establishing access control and rights
-implementing procedures for data dissemination, maturation, storage, disposal
