- Study guides, Class notes & Summaries

Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction - Answer Information Security Companies that process credit card payments must comply with this set of standards - Answer Payment Card Industry Data Security Standard (PCI DSS) Used to keep something private or minimally known - Answer Confidentially Refers to the ability to prevent our data from being changed in an unauthorized or undesirable manne...

What is OPSEC? - Answer the formal set of processes established by the US military for protecting critical information What was Purple Dragon? - Answer the name of a study conducted to uncover how US intelligence operations information was being leaked during the Vietnam War What is Operations Security? - Answer a process that we use to protect our information. What can Sun Tzu teach us about operational security? - Answer -that we ought to discover information while attempt...

Port scanner - Answer Which tool can be used to map devices on a network, along with their operating system types and versions? SQL Injection - Answer Which web attack is a server-side attack? Availability - Answer A company has had several successful denial of service (DoS) attacks on its email server. Which security principle is being attacked? SQL Injection - Answer Which web attack is possible due to a lack of input validation? Encryption - Answer Which file a...

What is the difference between verification and authentication of an identity? - Answer Authentication is the establishment that a claim to one's identity is true, while verification is just more support for who they are claiming to be How do you measure the rate at which you fail to authenticate legitimate users in a biometric system? - Answer This is measured through two metrics the False Rejection Rate and False Acceptance Rate. Ideally, we want the two to equal each other. What ...

Information Security - Answer Keeping data, software, hardware secure against unauthorized access, use, disclosure, disruption, modification, or destruction Compliance - Answer The requirements that are set forth by laws and regulations Healthcare Industry - Answer HIPPA/HITECH Industry Payment Card Industry - Answer PCI-DSS Industry Federal Government Agencies Industry - Answer FISMA Industry CIA - Answer Core model of all information security Confidentiality ...

Which cybersecurity term is defined as the potential for an attack on a resource? - Answer Threat Which security type deliberately exposes a system's vulnerabilities or resources to an attacker? - Answer Honeypots Which tool can be used to map devices on a network, along with their operating system types and versions? - Answer Port scanner Which web attack is a server-side attack? - Answer SQL injection An organization employs a VPN to safeguard its information. Which...

At a small company, an employee makes an unauthorized data alteration. Integrity Confidentiality Availability Authenticity - Answer Integrity An organization plans to encrypt data in transit on a network. Which aspect of data is the organization attempting to protect? Authenticity Possession Availability Integrity - Answer Integrity Which aspect of the CIA triad is violated by an unauthorized database roll back or undo? Integrity Confidentiality Availability I...

abduction - Answer the back and forth process of constructing a hypothesis, carrying that hypothesis into the field of investigation, and revising it when or if the hypothesis is negated by new discoveries action - Answer contextual talk, texts, and interactions (e.g. documents, emails, verbal routines, text messages) bricolage - Answer the practice of making creative and resourceful use of a variety of pieces of data that happen to be available deductive reasoning - Answer ...

A user copies files from her desktop computer to a USB flash device and puts the device into her pocket. Which of the following security risks is most pressing? Explain why as well - Answer The correct answer is confidentiality because confidentiality ensures that data is not disclosed to unintended persons. Removable media poses a big threat to confidentiality because it makes it easy to remove data and share data with unauthorized users. Smart phones with cameras and internet capabiliti...

Making sure that a person is responsible for their actions. Helps keep track of how people are accessing sensitive data stored digitally in an organization - Answer Accountability Under this law in the US, financial data is protected against such things as corporate fraud - Answer Sarbanes-Oxley Act of 2002 Process of reviewing an organization's records or information such as ensuring people comply with laws, policies, and other administrative controls - Answer Auditing Ref...