CSC2570 - Final Review

In the Bell-LaPadula (BLP) model, ( Secret [NUC, US] ) dom ( Secret [NUC] ) is a valid dominance relationship.

Which of the following, when considered alone, would qualify as protected health information? Select all that apply:

The term privacy can refer to which of the following? Select all that apply:

This principle means: "Each access to an object must be validated every time it occurs."

Which of the following are examples of quasi-identifiers? Select all that apply:

In RBAC, large organizations may experience "role explosion" in which the number of roles becomes unmanageable.

FIPPS states that an entity collecting PII should articulate its purpose and what authority permits them to collect it.

Which access control scheme is a centralized, high-security implementation often used by the government and military?

In Kantianism, a categorical imperative is a morally-binding rule that all people must follow to remain moral.

Cyberspace is a dark environment with low visibility and diminished accountability.

Which theory or ethical framework is an example of consequentialism?

Which of the following is an example of an unstructured threat?

In the Bell-LaPadula (BLP) model, ( Top Secret [NUC, US] ) dom ( Secret [NUC, EUR] ) is a valid dominance relationship.

Which of the following refers to all possible areas of a system where an attack might occur?

Technology advances more quickly than laws, making it difficult for the legal system to keep up.

Which term best describes a phishing attack aimed at a high-value target, such as a business owner or public official?

FIPPS recommends that PII be retained after its use so that accurate records are maintained.

Which theory or ethical framework is concerned with concepts such as honesty, courage, and generosity?

Which of the following are potential indicators for a malicious insider? Select all that apply:

Which theory or ethical framework suggests that people accept governance on the condition that others do so as well.

Which term refers to the idea that people should evaluate each decision according to the greater good it would produce?

Which of the following are examples of direct identifiers? Select all that apply:

Which term refers to the idea that people should be treated as an end in themselves, rather than a means to an end?

This principle means: "An entity should be given only the privileges necessary to complete a task."

This principle means: "Keep a design as simple as possible."

In which access control scheme does the owner of a resource have direct control over permissions to that resource?

Which of the following are ways in which the human element of a system can be strengthened? Select all that apply:

FIPPS recommends that PII be used only for the purpose described in its collection.

This term means "standing near a target to directly observe sensitive information, such as passwords."

Which of the following is the correct format for an allowed relation in the Clark-Wilson model?

This principle means: "The default state of a resource should be the state that is most secure."

A zero day attack relies on vulnerabilities that have yet to be widely discovered and patched.

The online disinhibition effect shows that people's online behavior often mimics their behavior in person.

This term refers to a list of attack methods and their requirements, that defenders use to understand system weaknesses.

A disinformation campaign is an organized effort to spread false information and/or suppress true information.

Which theory or ethical framework focuses on concepts of duty and obligation?

This term means "engineering a scenario to interact with a target (often in person) to obtain information."

Which of the following best describes a Video Home System (VHS)?

Which of the following are weaknesses in the human element of a system? Select all that apply:

Why are access control matrices (ACMs) impractical to implement literally? Select all that apply: