Security Pro Chapter 1

A user copies files from her computer to a USB and puts the device into her pocket. Which security risk is most pressing

Information security and cybersecurity tasks can be classified as these five functions:

The CIA of Security refers to

Process of identifying security issues & deciding which countermeasures to take

Ensures that data is not modified or tampered with

Includes all hardware and software necessary to secure data, such as firewalls and antivirus software?

Seek to exploit security vulnerabilities for some kind of financial reward or revenge

This security control category is implemented primarily by people rather than systems

Generally use the Internet to carry out terrorist activities

Threat agent who uses their technical knowledge to bypass security mechanisms

Includes all hardware and software necessary to secure data, such as firewalls

Threat agent who uses their technical knowledge to bypass security mechanisms

A formalized statement that defines how security will be implemented in an organization

This security control type acts to eliminate or reduce the likelihood of an attack succeeding

Legislation that mandates the implementation of risk assessments, internal controls, and audit procedures

Download & run attacks available on the internet, but generally can't create their own code

The compensating control includes controls such as alarms, gateways, locks, lighting, etc.

Provides validation of a message's origin

This security control type acts to eliminate or reduce the impact of an intrusion event

A procedure or product that takes advantage of a vulnerability to carry out a threat

A security control is something designed to give a system or data asset the CIA properties

A company has installed motion-activated floodlighting on the grounds around its premises. What class and function?

This term means that responsible persons have not been negligent in discharging their duties

Business unit used to manage important and complex security requirements