107: Cyber Security

Question 1

107.2a
Define Certification

Answer 1

evaluation of security features

Question 2

107.2b
Define Accreditation

Answer 2

process in which certification of competency, authority, and credibility is presented

Question 3

107.2e
Define ATO

Answer 3

Authority To Operate (ATO)

official management decision to operate an Information System (IS)

may be issued for up to 3 years

Question 4

107.2f
Define IATO

Answer 4

Interim Authority to Operate (IATO)

limited authorization to operate under specific terms and conditions

Question 5

107.4
Discuss risk management

Answer 5

the process that balances operational and economic costs of protective measures to achieve mission capability

effective risk management reduces risk assumed by all systems to an acceptable level for operational use

Question 6

107.5a
Describe the confidentiality attribute of cybersecurity

Answer 6

assurance of no unauthorized disclosure of information

Question 7

107.5b
Describe the integrity attribute of cybersecurity

Answer 7

protection against unauthorized modification or destruction of information

Question 8

107.5c
Describe the availability attribute of cybersecurity

Answer 8

timely, reliable access to data and information systems for authorized users

Question 9

107.5d
Describe the Non-repudiation attribute of cybersecurity

Answer 9

proof of data delivery & proof of sender’s identity

Question 10

107.5e
Describe the Authentication attribute of cybersecurity

Answer 10

assurance of user identity & established validity of a transmission

Question 11

107.8f
Define Patch

Answer 11

a fix for a vulnerability or an operational enhancement

Question 12

107.10
Explain the difference between vulnerability and threat

Answer 12

a vulnerability is a weakness; a threat is a possible exploiter of a weakness

Question 13

107.11
State the duties and responsibilites of the ISSM and ISSO

Answer 13

Information System Security Manager & Officer
Manager: principal advisor on all matters involving IS security
Officer: Supports the ISSM and manages IS configurations
** NIOC Pacific Feb2025 ISSO - Chief Johnson

Question 14

107.13
Discuss the role and responsibilities of Navy Red and Blue teams

Answer 14

Navy Red does penetration testing of systems and networks to find vulnerabilities (increases offense)
Navy Blue does system hardening of systems and networks (increases defense)

Question 15

107.15
Explain what constitues PII and the importance of safeguarding

Answer 15

Personally Identifiable Information
any information that could potentially identify a specific person