Security Foundations Exam Questions with Guaranteed Accurate Answers

Security - correct answer It is also defined as the measures taken to ensure safety Information Security - correct answer is broadly defined as the tasks of securing information in digital format throughout all its more fully defined as that which protects the integrity, confidentiality, and availability of information on the devices that store, manipulate, and transmit the information through products, people, and procedures. Attacks - correct answer defined as any attack initiated from a device against another device, network or system that compromises the confidentiality, integrity or availability of the target and/or the information stored there. Threats - correct answer Any action that has the potential to cause harm. are events or actions that represent a danger to information assets Threat Actor - correct answer person or element that has the power to carry out a threat. plans, policies and procedures - correct answer These range from the security frameworks professionals use to define the security posture of an entire organization to the detailed policies and procedures individuals follow to support the security posture of an organization such as Acceptable Use Policies (AUP) and written password policies. Assets - correct answer an item that has value. provide value to an organization, cannot be easily replaced and many times are part of an organization's corporate identity. vulnerability - correct answer a flaw or weakness that allows a threat actor to bypass security. risk - correct answer A situation which involves exposure to some type of danger. Usually found at the junction of threat and vulnerability. owner - correct answer person who decides how valuable an asset is and what type of security controls should be put in place. custodian - correct answer person who implements the security controls based on the value of the asset as determined by the owner. user - correct answer person who accesses the resources of a business and is considered the user of the asset. officer - correct answer liaison between management (the owner) and the IT staff (the custodian). managerial personnel - correct answer administer and manage plans, policies, and people.