Cybersecurity

Question 1

Permitting authorized access to data and information while simultaneously protecting it from inappropriate disclosure is what?

Confidentiality
Integrity
Availability
Non repudiation

Answer 1

Confidentiality

Data at rest, in transit

Ex. Obfuscation, Intellectual property, PII, PHI

Question 3

Measures degree to something not being corrupted, info at rest or in transit

Confidentiality
Integrity
Availability
Non repudiation

Answer 3

Integrity

Question 4

Give me one example of an integrity attack

Answer 4

Injection or hijacking
Modifying critical files
Corrupting route and memory tables
Changing access control lists
DNS, arp, dhcp poisoning

Question 5

Maintains timely and reliable access, access resources when needed

Confidentiality
Integrity
Availability
Non repudiation

Answer 5

Availability

Question 6

Example of availability attacks

Answer 6

Spoofing
Flooding
Dos
Poisoning

Question 7

Authorizing is the process of verifying or proving the identity of a principal

Answer 7

False, authentication

Question 8

Authentication can operate in character (admin) or network (packet) mode

Answer 8

True

Question 9

Ensures users can access some resources with one set of credentials but prompt them for more credential when they request elevated access is step up authenticate

Answer 9

True

Question 10

Examples of KBA?

Answer 10

Security questions
Public record questions
Live conference

Question 11

Name a tool for no.n repudiation

Answer 11

Digital sig
Digital certificate

Question 12

Measure of the extent to which an entity is threatened by a potential circumstance

Vulnerability
Risk
Threat
Non repudiation

Answer 12

Risk

Question 13

Total risk is the potential for the occurrence of an adverse event if no mitigation action is taken

Answer 13

True

Question 14

Residual risk is inherent risk

Answer 14

True

Question 15

Result of a risk assessment is what?

Answer 15

Risk register or ledger

Question 16

Set of assumptions and tolerances that shape and organize approaches to managing risk is risk framing

Answer 16

True

Question 17

Managerial controls, risk assessment, best practice, password policy, mandatory vacation, separation of duties

Answer 17

Administrative controls

Question 18

Deliver confidentiality, integrity, authenticity, availability and non repudiation, detect security requirements

Answer 18

Technical controks

Question 19

Infrastructure config, iOS, firewalls, EDR, Soar, are what kind of controls?

Answer 19

Technical

Question 20

Protect people and equipment. Security guards, locks, bollsrds are what controls?

Answer 20

Physical