🔹107 Information Assurance

Question 1

🔹5 attributes of IA?

Answer 1

– Confidentiality 
– integrity 
– availability 
– non-repudiation
– authentication

Question 2

🔹Define confidentiality

Answer 2

Assurance that information is not disclosed to unauthorized individuals, processes or devices.

Question 3

🔹Define Integrity

Answer 3

is assurance that information is not modified by unauthorized parties or in an unauthorized manner. Integrity supports the assurance that information is not accidentally or maliciously manipulated, altered or corrupted. Additionally, integrity implies the ability to detect when information has been altered.

Question 4

🔹Define Availability

Answer 4

is assurance of timely, reliable access to data and Information systems by authorized users. Availability-focused IA controls protect against degraded capabilities and denial of service conditions.

Question 5

🔹Define Non-repudiation

Answer 5

Is assurance that the sender of data is provided with proof of delivery and the recipient is provided with proof of the sender’s identity, so neither can later deny having processed the data.

Question 6

🔹Define Authentication

Answer 6

Is assurance of the identity of an e-mail message sender or receiver. Authentication supports the validation of e-mail messages and information system access requests.

Question 7

🔹List the 9 categories of computer incidents.

Answer 7

1-Root
2-User
3-Unsuccessful Attempt
4-Denial of Service
5-Poor Security
6-Scan/Probe
7-Malicious Logic
8-Investigating
9-Explained Anomaly

Question 8

🔹What is the difference between a vulnerability and a threat?

Answer 8

Vulnerability - weakness in an IS that could possibly be exploited by a threatening source.
Threat - the potential to adversely affect an IS by unauthorized access, destruction, disclosure, or DoS.

Question 9

🔹What is an ATO?

Answer 9

An ATO is an “Authority To Operate” issued by the DAA or PAA to authorize operation of information system.

Question 10

🔹IAVA

Answer 10

IAVA: IA Vulnerability Alerts (IAVA) address severe network vulnerabilities resulting in immediate and potentially severe threats to DON systems and information. Corrective action is of the highest priority due to the severity of the vulnerability risk

Question 11

🔹IAVB

Answer 11

IAVB: Information Assurance Vulnerability Bulletins (IAVB) address new vulnerabilities that do not pose an immediate risk to DON systems, but are significant enough that noncompliance with the corrective action could escalate the risk.

Question 12

🔹IAVT

Answer 12

IAVT: Information Assurance Vulnerability Technical Advisory: vulnerability notifications (i.e., alerts, bulletins, and technical advisories/notifications) IAW CJCSM 6510.01. USSTRATCOM may direct corrective actions (which may ultimately include disconnection) of any enclave(s), or affected system(s) on the enclave, not in compliance with IAVM program directives and vulnerability response measures (e.g., tasking order or message). USSTRATCOM will coordinate with CC/S/As and field activities to determine operational impact to DOD before instituting disconnection.

Question 13

🔹What is a service pack?

Answer 13

A collection of updates, fixes and/or enhancements to a software program delivered in the form of a single installable package

Question 14

🔹Define IA

Answer 14

Information Assurance:

Measures that protect and defend information and information systems thru the 5 attributes of IA. These measures include providing for restoration of information systems by incorporating protection, detection, and reaction capabilities.