Chapter 1

Question 1

information security

Answer 1

The act of protecting information from unauthorized access

Question 2

confidentiality

Answer 2

Preventing the disclosure of information to unauthorized persons

Question 3

integrity

Answer 3

authorization is necessary before data can be modified

Question 4

availability

Answer 4

Data is obtainable regardless of how information is stored, accessed, or protected.

Question 5

authentication

Answer 5

When a person’s identity is confi rmed

Question 6

authorization

Answer 6

When a user is granted access to specifi c resources after authentication is
complete.

Question 7

accounting

Answer 7

The tracking of data, computer usage, and network resources.

Question 8

non-repudiation

Answer 8

idea of ensuring that a person or group cannot refute the validity
of your proof against them.

Question 9

defense in depth

Answer 9

The building up and layering of security measures that protect data
from inception, on through storage and network transfer, and lastly to fi nal disposal.

Question 10

white hat

Answer 10

A type of hacker that is contracted to break into a company’s system.

Question 11

ethical hacker

Answer 11

An expert at breaking into systems and can attack systems on behalf of
the system’s owner and with the owner’s consent.

Question 12

black hat

Answer 12

A hacker that breaks into computer systems without permission, with the
express purpose of theft, piracy, credit card fraud, or other illegal activities.