B

Question 1

Backup center

Answer 1

An alternate facility to continue IT/IS operations when the primary data processing (DP) center is unavailable

Question 2

Baseline security

Answer 2

The minimum security controls required for safeguarding an IT system based on its identified needs for confidentiality, integrity and/or availability protection

Question 3

Benchmarking

Answer 3

A systematic approach to comparing enterprise performance against peers and competitors in an effort to learn the best ways of conducting business.

Question 4

Bit copy

Answer 4

Provides an exact image of the original and is a requirement for legally justifiable forensics

Question 5

Bit

Answer 5

A contraction of the term binary digit, and the most basic and smallest unit of computing information. A bit may be in one of two states, logic 1 or logic 0. It can be thought of as a switch that is either on or off. Bits are
usually combined into computer words of various sizes, named bytes.

Question 6

Bit-stream image

Answer 6

Bit-stream backups, also referred to as mirror image backups, involve the backup of all areas of a computer hard disk drive or other type of storage media.

Question 7

Blue team

Answer 7

A group that proactively conducts systematic examinations of information systems or products to determine the adequacy of security measures, identify security deficiencies, responds to technical security incidents and confirms the adequacy of such measures after implementation. Blue teams are typically internal security personnel that may or may not be part of an enterprise security operations center.

Question 8

Botnet

Answer 8

A term derived from robot network; a large automated and distributed network of previously compromised computers that can be simultaneously controlled to launch large-scale attacks, such as a denial-of-service attack, on targeted victims

Question 9

Brute-force attack

Answer 9

Methodically trying all possible combinations of passwords or encryption keys until the correct one is found

Question 10

Business case

Answer 10

Documentation of the rationale for making a business investment, used both to support a business decision on whether to proceed with the investment and as an operational tool to support management of the investment
through its full economic life cycle

Question 11

Business continuity plan (BCP)

Answer 11

A plan used by an enterprise to respond to disruption of critical business processes; depends on the contingency plan for restoration of critical systems

Question 12

Business continuity

Answer 12

Preventing, mitigating and recovering from disruption

Question 13

Business dependency assessment

Answer 13

A process of identifying resources critical to the operation of a business process

Question 14

Business impact analysis (BIA)

Answer 14

Process of evaluating the criticality and sensitivity of information assets by determining the impact of losing the support of any resource to an enterprise. Establishes the escalation of that loss over time, identifies the minimum resources needed to recover and prioritizes the recovery of processes and the supporting system.

Question 15

Business impact

Answer 15

The net effect, positive or negative, on the achievement of business objectives

Question 16

Business Model for Information Security (BMIS)

Answer 16

A holistic and business-oriented model that supports enterprise governance and management information security, and provides a common language for information security professionals and business management.