stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security Chapter 1 goozygodmade Flashcards | StudBud
Explore
/
Security Chapter 1 goozygodmade
Security Chapter 1 goozygodmade
69 terms
·
StudBud Administration
·
5 plays
Imported from external platform
Flashcards
69 cards
F
Practice quiz
P
Host live
L
Questions
69
Answers
1
transfer risk to a third party
Transfer
Mitigate
avoid
product
2
Which is a reason for successful Attacks?
Google Dorking
Piggybacking
Hardware Limitations
HIPAA
3
Which is a reason for successful Attacks?
Brokers
Virus
Configuration issues
Malware
4
who launches attack against an opponent’s system to steal classified information for a competitive advantage?
Internal Threat
Competitor
Insider
Mob
5
Hardware has limited resources and an attacker can intentionally consume more resources than he needs
Hardware Limitations
Widespread vulnerabilities
Poorly designed Software
Configuration Issues
6
What is cyberterroism designed to do?
Interfere with radio frequencies
jam satellites
Mess up your home internet
cause panic, provoke violence, result in financial catastrophe
7
what is one type of information protection in CIA triangle?
Security
availability
Authentication
Layering
8
True Or false?
True
False
9
Those who implement and properly use security products to protect data.
people
products
integrity
confidentiality
10
Who sells their knowledge of a vulnerability to other attackers or governments?
Trader
Broker
Terrorist
Competitor
11
Which is a reason for successful Attacks?
Competitors
Poorly designed Software
Threat Actor
Asset
12
What goes in 7?
stored
products
people
availability
13
What is this describing?
Limiting
diversity
Obscurity
layering
14
What is moving from traditional criminal activities to more rewarding and less risky online attacks?
Broker
Trader
Outsider
Organized Crime
15
What is a flaw or weakness that allows a threat agent to bypass security?
Threat actor
Vulnerability
Risk
Accept
16
what goes in number 3?
stored
products
integrity
people
17
who may target foreign governments, citizens of government who may be hostile or threatening and are resourced/ skilled
Broker
nation state actor
competitor
hactivist
18
What is this describing?
Defense-in-Depth
Availability
Limiting
Simplicity
19
What is the means by which an attack can occur?
Transfer
Vulnerability
Threat actor
Risk
20
What is the goal of most threat actors?
Competition
Financial Gain
Skill Testing
Fun
21
What is this describing?
Defense in Depth
Obscurity
Layering
Limiting
22
who are individuals who want to attack computers yet they lack the knowledge of computers and networks needed to do so
Vulnerability
Script Kiddies
Risk
Hactivist
23
Who attacks a nation’s network and computer infrastructure to cause disruption and panic among citizens
Hactivist
Cyberterrorist
Nation State Actor
Terrrorist
24
What goes in number 1?
integrity
confidentiality
people
policies and procedures
25
Plans and policies established by an enterprise to ensure that people correctly use the products.
Policies and procedures
products
people
Integrity
26
what is one type of information protection in CIA triangle?
Authentication
Confidentiality
obscurity
Security
27
What are the five fundamental security principals for defense?
Bricking, Limiting, Diversity, Obscurity, Simplicity
Layering, Limiting, Diversity, Obscurity, Simplicity
Layering, Defense-in-depth, Limiting, Diversity, Simplicity
Bricking, defense-in-depth, diversity, Obscurity, Simplicity
28
Payment Card Industry Data Security Standard (PCI DSS)
protects health info
fights corporate corruption
Requires banks & financial institutions to alert of polices and proecedures
standards followed by anyone processing, storing, sharing credit/debit info
29
which of these describes Widespread vulnerabilities?
Poorly Designed Software
Hardware Limitations
Almost all devices have default configurations that users do not change
They are common and attackers can choose which one to exploit.
30
What is this describing
Authentication
Limiting
Obscurity
Simplicity
31
What goes in 8?
Stored
processed
integrity
people
32
What is a focus of financial cybercrime?
individuals as the victims
enterprises and government
college tuition
avoiding detection
33
What goes in number 2?
availability
transmitted
products
People
34
information security is what?
task of troubleshooting a network error
task of changing network settings for easy access
tasks of securing information in a digital format shared over a network
Task of securing important items in a safe
35
All frameworks/architectures are domestic
False
True
36
Security is?
government funded
process that achieves freedom
hacking a device
be free form danger
37
Form the security around the data. May be as basic as door locks or as complicated as network security equipment.
integrity
policies and procedures
people
products
38
what's an individual who attacks for ideological reasons that are generally not as well-defined as cyberterrorist motifs
hactivist
corruption
Broker
Traitor
39
What goes in 9?
products
Stored
integrity
people
40
Information security is the what?
manipulating one's computer network
tasks of securing information in digital format changed by a microprocessor
preserving knowledge on a computer
saving data in a hard drive
41
What is a situation that involves exposure to some type of danger?
avoid
people
integrity
Risk
42
The Health Insurance Portability and Accountability Act of 1996 (HIPAA)
fights corporate corruption
Requires banks & financial institutions to alert of polices and proecedures
standards followed by anyone processing, storing, sharing credit/debit info
protects health info
43
what goes in number 6?
stored
Integrity
people
processed
44
attempt to address risk by making the risk less serious
Accept
likelihood
Mitigate
situation
45
information security is what?
tasks of securing information in a digital format saved on storage device
Task of making other's information available
Task of making your information public
task of hacking into other networks
46
what's a multiyear intrusion campaign that targets highly sensitive economic, proprietary, or national security info?
High level Intrusion
Advanced Persistent Threat
Yearlong invasion
National invasion
47
what is one type of information protection in CIA triangle?
Obscurity
Integrity
Security
Authentication
48
What's described as Type of action that has the potential to cause harm ex: hacking into your network, stealing your car
People
integrity
Threat
Asset
49
which 4 are response techniques?
Accept, Apologize, Mitigate, Transfer
Accept, Convey, Avoid, Transfer
Accept, Transfer, Avoid, Mitigate
Accept, Safety, Store, Mitigate
50
What is Cyberterrorism?
Helping to secure information
scaring the neighbors
terrorizing over the phone
premeditated, politically driven attack against info, PC programs, and data
51
What goes in number 4?
transmitted
availability
stored
confidentiality
52
What goes in number 5
proeccessed
integrity
confidentiality
products
53
what is described by their attributes, funding /resources, internal/external to enterprise/organization, intent/motive
vulnerability
threat actor
threat
Risk
54
ensure protective measures properly placed to ward off attacks and stop total system collapse when attack success occurs
backing up files
manipulated by a microprocessor
trasmitting over a network
information security goal
55
What is this describing?
Authentication
Obscurity
Diversity
Layering
56
what's a source of making a secure IT environment & a program structure/ security management guide for security programs
Network Manual & Guidebook
global blueprints and design coding
Security Manual and premade Java Script
Industry-standard frameworks and reference architectures
57
What are threat actors who are employees, contractors, or business partners and leak information?
Traitor
External Threat
Insider
Outsider
58
create a race condition in software that occurs when 2 concurrent thread of execution open a share source simultaneously
configuration issue
widespread vulnerabilities
Poorly designed software
hardware limitations
59
What is described as an Item that has value ex: scooter, software, information contained on a computer?
Threat
Asset
Threat Actor
confidentiality
60
The Gramm-Leach-Bliley Act (GLBA)
Requires banks & financial institutions to alert of polices and proecedures
protects health info
standards followed by anyone processing, storing, sharing credit/debit info
fights corporate corruption
61
what is an attacker commissioned by the government to attack enemies’ information systems?
Script Kiddie
Nation state actor
Thief
Hactivist
62
What happens to security if convenience increases?
It increases
It decreases
It stays the same
It depends
63
Which of these describes Configuration Issues?
Almost all devices have default configurations that users do not change
race conditions
Widespread vulnerabilities
Poorly Designed Software
64
Which is a reason for successful Attacks?
Widespread vulnerabilities
Hactivists
hackers
Actors
65
what happens to convenience if security is increases?
It stays the same
It depends
It increases
It decreases
66
risk is acknowledged but no steps are taken to address it
Accept
Transfer
Mitigate
Avoid
67
identifying risk but making the decision to not engage in the activity
Mitigate
procedure
vulnerability
Avoid
68
What is described as a person or element with power to carry out a threat ex: thief, malicious software?
Threat actor
Threat
product
Assset
69
The Sarbanes-Oxley Act of 2002 (Sarbox)
standards followed by anyone processing, storing, sharing credit/debit info
protects health info
fights corporate corruption
Requires banks & financial institutions to alert of polices and proecedures
