Module 4_ Risk, Adversity & Trust (Part 1)

Question 1

Human error resulting in a loss of confidentiality, integrity, or availability to an information resource is known as a:

Accepted Answer

Threat

Question 2

Nation-state sponsored espionage activity is an example

Accepted Answer

Attack

Question 3

Which term refers to an individual, group, organization, or gov't that has the intent to conduct detrimental activities?

Accepted Answer

Adversary

Question 4

User error resulting in access to, modification of, and disclosure confidential information assets represents a loss of:

Accepted Answer

Confidentiality & Integrity

Question 5

Which statement describes the purpose of a data classification system for cybersecurity?

Accepted Answer

To identify information assets and protect them from a loss of C, I and A.

Question 6

Which term refers to an attempt that exploits a weakness and compromises the systems CIA?

Accepted Answer

Attack

Question 7

Which term refers to a circumstance or event with the potential to have an adverse effect on organizational operations?

Accepted Answer

Threat

Question 8

Inappropriate access to, disclosure of, protectively marked information, by an adversary or accidentally, is a loss of:

Accepted Answer

Confidentiality

Question 9

Ransomware attacks such as WannaCry that lock files until a ransom is paid compromises:

Accepted Answer

Availability

Question 10

The process of granting access to (IT) system resources (including files) only to authorized users is a primary ctrl for

Accepted Answer

Confidentiality

Question 11

A software bug that can cause a buffer overflow in a computer program resulting in a loss of CIA is a:

Accepted Answer

Vulnerability

Question 12

Fire, flood, or an adverse weather event impacting the security of information assets is known as a:

Accepted Answer

Threat

Question 13

Which statement describes why information assets must be identified for cybersecurity purposes?

Accepted Answer

Because you cannot protect what you have not identified

Question 14

What is the term used to describe ensuring that authorized parties are able to access the information when it is needed?

Accepted Answer

Availability

Question 15

Which term refers to a weakness in an information system, security procedures, internal controls, or implementation?

Accepted Answer

Vulnerability

Questions 15