Chapter 1 Security Fundamentals

To accept risk is to acknowledge that it is there but take no steps to address

This is an attacker who uses ideological reasons as a basis for an attack

This is defined as reducing the threat against information by ensuring only those who must use data are granted access.

This act requires banks/financial institutions to alert customers of their policies and practices

A vulnerability is a flaw or weakness that allows a threat or agent to bypass security.

This term best describes automated hacking software (scripts) downloaded from websites that are used by Script Kiddies

Simplicity is described as making a secure system simple from the outside but complex from the inside.

This is an attacker commissioned by the government to attack enemy information systems.

A Threat Vector is a flaw or weakness that allows a threat or agent to bypass security

This is an item that has value (House, Car, Software, Info contained on a computer)

Diversity is described as making each layer different to ensure that breaching 1 layer does not compromise whole system

These individuals launch an attack against an opponents system to steal classified information

Widespread Vulnerability, Configuration Issues, Poorly Designed Software, and Hardware Limitations are reasons for?

This is a multi-year intrusion campaign that targets highly sensitive economic/proprietary national security information

These form the security around the data. (i.e. door locks, network security equipment)

A situation that involves exposure to some type of danger.

This is the act of stealing another person's information such as their social security number.

Confidentiality is to ensure only the approved individuals have access to the information.

This is the act of stealing proprietary business information

This is a premeditated/politically motivated attack designed to cause panic, provoke violence, and financial catastrophe

Layering is also called the Defense-in-Depth approach and is provides the most comprehensive protection

These are standards that all companies that process, store, or transmit credit/debit card information must follow

These are the 4 Risk Response Techniques

A Script Kiddie is an individual who wants to attack computers and has the knowledge and expertise to do so.

The following are the 3 types of Information Protection