MOD 1

Question 1

What are the core IA Terms (TVAC)?

Answer 1

Threat, Vulnerability, Attack, Control (TVAC)

Question 2

What is a set of circumstance that can lead to loss or harm?

Answer 2

Threat

Question 3

What is a weakness in the security system?

Answer 3

Vulnerability

Question 4

What is exploiting a vulnerability?

Answer 4

Attack

Question 5

What counters a vulnerability?

Answer 5

Control

Question 6

To attack, what 3 things are needed?

Answer 6

1) Method
2) Opportunity
3) Motive

Question 7

What is the outer layer in the Layers of Defense in Depth?

Answer 7

Policies, Procedures, Awareness

Question 8

What is the inner layer in the Layers of Defense in Depth?

Answer 8

Data

Question 9

What does CIA stand for?

Answer 9

Confidentiality, Integrity, Avaliability

Question 10

Which security goal focuses on secrecy and privacy?

Answer 10

Confidentiality

Question 11

Which security goal focuses on precision, consistency, and usability?

Answer 11

Integrity

Question 12

Which security goal focuses on data/services received in a timely fashion?

Answer 12

Avaliability

Question 13

Which security goal supports identification and authentication?

Answer 13

Authenticity

Question 14

What is like a username (claiming to be someone)

Answer 14

Identification

Question 15

What is like a password (verifying who you are)

Answer 15

Authentication

Question 16

Authenticity and Non-Repudiation are essential for _________.

Answer 16

E-Commerce

Question 17

What is a crime involving a computer or aided by a computer?

Answer 17

Computer Crime

Question 18

What are examples of Computer Criminals?

Answer 18

disgruntled employees, hackerss, state-sponsored

Question 19

What is the possibility for harm to occur (Likelihood)?

Answer 19

Risk

Question 20

What are the 5 Risk Management methods?

Answer 20

1) Prevent
2) Deter
3) Deflect
4) Detect
5) Recover

Question 21

What is a broad statement?

Answer 21

Policy

Question 22

What are specific actions to be taken?

Answer 22

Procedures