Assets

Question 1

Type of assets

Answer 1

Hardware (Tangible)
Software (Security System or process)
Comination (file transfer between computers)
data (personal, private, business, public)

Question 2

Types of passive attack

Answer 2

Release of message contents
Traffic analysis

Question 3

Types of active attack

Answer 3

Replay, Masquerade, modification of messages, denial of service

Question 4

Security requirements

Answer 4

Access control
awareness and training
audit and accountability
certification
accreditation and security assessments
config management
contingency planning
identification and authentication
incident response
media protection
physical and enviromental protection
risk assessment
system and comms protection
system and info integrity

Question 5

Network Attack surface

Answer 5

Vulnerabilities over a network

Question 6

Software attack surface

Answer 6

Vulnerabilities in application, utility or OS code

Question 7

Human Attack surface

Answer 7

vulnerabilities created by personel or outsiders

Question 8

Computing Standards organisations

Answer 8

NIST, ISOC, ITU-T, ISO