1.1

Question 1

Info Sec

Answer 1

Protecting data from unauthorized access, disruption, disclosure and destruction

Question 2

Info Systems Sec

Answer 2

Protecting the system s(computer, servers and network devices that hold and process data)

Question 3

CIA Triad

Answer 3

Confidentiality, Availability and Integrity

Question 4

CIA Pentagon

Answer 4

Includes non-repudiation and authentication

Question 5

Triple A’s of Security

Answer 5

Authentication, Authorization and Accounting

Question 6

Security Control categories

Answer 6

Technical, Managerial, Operational and Physical

Question 7

Security Control Categories

Answer 7

Deterrent, detective, corrective, directive, preventative and compensating

Question 8

Threat

Answer 8

Anything that could cause harm, loss, damage or compromise to our security systems (natural disasters, cyber attacks, disclosure of confidential info, data integrity breaches)

Question 9

Vulnerability

Answer 9

Any weakness in system design or implementation. Software bugs, misconfigured software, improperly protected devices, missing patches and lack of physical security

Question 10

Risk Management

Answer 10

Finding different ways to minimize the likeihood of an outcome and achieve the desired outcome

Question 11

Technical Controls

Answer 11

The technologies, hardware and software mechanisms that are implemented to manage and reduce risks

Question 12

Managerial Controls

Answer 12

also referred to as administrative controls. Involve strategic planning and governance

Question 13

Operational Controls

Answer 13

Procedures and measures desinged to protect data on a day to day basis.

Question 14

Physical Controls

Answer 14

tangible real world measures taken to protect assets

Question 15

Preventative Controls

Answer 15

Proactive measures to thwart potential security threats or breaches

Question 16

Deterrent Controls

Answer 16

discourage potential hackers by making the effort seem less appealing or more challenging

Question 17

Detective Controls

Answer 17

Monitor and Alert orgs to malicious activities as they occur or shortly thereafter

Question 18

Corrective Controls

Answer 18

mitigate any potential damage and restore our systems to their normal state

Question 19

Compensating Controls

Answer 19

alternative measures that are implemented when primary security controls are not feasible to achieve

Question 20

Directive Controls

Answer 20

Guide inform or mandate actions. Often rooted in policy or documentation and sets the standards for behavior within an organization