stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CST4530 2024-25-Security Mechanisms Flashcards | StudBud
Explore
/
CST4530 2024-25-Security Mechanisms
CST4530 2024-25-Security Mechanisms
20 terms
·
StudBud Administration
·
59 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
Inherent risk
refers to:
The baseline risk that exists before any security controls are in place
The risk after countermeasures have been applied
The risk associated with third-party vendors
The likelihood of an attack succeeding after controls are implemented
2
Which of the following would most likely be considered an
exploit
?
A firewall that blocks incoming traffic
A protocol designed to detect vulnerabilities
An organization’s risk management policy
A successful phishing campaign that leads to stolen credentials
3
The process of identifying assets and threats in an organization is known as
Security Auditing
Threat Modeling
Firewalling
Security Planning
4
Which one of these security relationships are true. Choose ALL the right answers
Countermeasures or controls try to mitigate cyber risks
Threat agents/actors give rise to threats
Threats>Exploits>Vulnerabilities
An asset is what im trying to protect
5
Which of the following statements best reflects the role of
countermeasures
in cybersecurity?
They reduce the likelihood and impact of threats by mitigating weaknesses
They completely eliminate all vulnerabilities within a system
They primarily focus on identifying potential external threats
They guarantee the security of data through non-repudiation mechanisms
6
The following are typical Computer Security Challenges
Physical and logical placement needs to be determined (PC in Classroom)
Security requires regular and constant monitoring
Computer Security is as simple as it might first appear to the novice
Attackers need to find a single weakness; Defenders must eliminate all
7
Security controls
or mechanisms are designed to:
Ensure legal compliance with global data protection laws
Increase residual risk to acceptable levels
Identify new business opportunities within a security framework
Detect, respond to, or recover from attacks
8
Which of these security goals are true. choose ALL the right answers
Reduce Risk
Delay the attacker as long as possible
Increase residual risk
Ensure countermeasures are effective
9
Assurance that communicating entity is the one that it claims to be known as
Data Integrity
Non-Repudiation
Authentication
Access Control
10
Data collected and used to facilitate a security audit is known as
Event Logs
Digital Signature
Security Audit Trials
Security Review
11
Physical and Logical controls to protect a PC in classroom could be
Use Full Disk Encryption (FDE) on the hard drive within the PC
Protect BIOS using the password 'password'
Protect the room where the PC is, with a PIN Lock as '1234'
Physically block all USB Ports
12
X.800 security architecture
identifies services and mechanisms that:
Address open system security across layers of communication
Focus exclusively on hardware security
Implement cloud security standards globally
Operate only within physical security boundaries
13
Which security services ensures the security of data from tampering by unidentified users
Non-Repudiation
Confidentiality
Integrity
Authentication
14
_______ is the concept for guiding information security with an organization
Confidentiality
Authenticity
Non-Repudiation
CIA Triad
15
For security Attacks, Mechanisms and Services. Which of these are true?
Security Mechanisms protect, detect, respond or recover to an attack
Encryption is a Security Mechanism used to achieve Confidentiality
Security Attacks are caused by Threat Agents & Threats.
Security Services use a Security Mechanism
16
This security principle provides protection against the statement "I didn't do this"
Integrity
Repudiation
Availability
Non-Repudiation
17
What is intended to counter security attacks and make use of one or more security mechanisms to provide the service ?
Exploit
Security Service
Security Attack
Security Mechanism
18
In the context of threat modeling, which of the following is most likely considered a
threat actor
?
A firewall with weak configurations
A system vulnerability that has not been patched
An employee who intentionally compromises internal data
An insecure network protocol
19
Residual Risk can be defined as
The remaining risk after the implementation of effective countermeasures
The risk level that increases after encryption
The total potential damage from an attack
The risk that is fully eliminated by security controls
20
In the context of risk assessment, which factor is critical in determining the
impact
of a threat on an asset?
The frequency of security audits
The number of system users
The current level of encryption used
The value of the asset
