Basics

Question 1

Confidentiality

Answer 1

Information has not been disclosed to unauthorized people

Question 2

Integrity

Answer 2

Information has not been modified or altered without proper authorization

Question 3

Availability

Answer 3

Information is able to be stored, accessed, or protected at all times

Question 4

AAA of Security

Answer 4

Authentication
Authorization
Accounting

Question 5

CIA Triad

Answer 5

Confidentiality
Integrity
Availability

Question 6

Authentication

Answer 6

When a person’s identity is established with proof and confirmed by a
system
● Something you know
● Something you are
● Something you have
● Something you do
● Somewhere you are

Question 7

Authorization

Answer 7

Occurs when a user is given access to a certain piece of data or certain
areas of a building

Question 8

Accounting

Answer 8

Tracking of data, computer usage, and network resources
Non-repudiation occurs when you have proof that someone has taken an
action

Question 9

Security Threats

Answer 9

Malware
Unauthorized Access
System Failure
Social Engineering

Question 10

Mitigating Threats Approaches

Answer 10

Physical Controls
Technical Controls
Administrative Controls

Question 11

Physical Controls

Answer 11

Alarm systems, locks, surveillance cameras, identification cards, and
security guards

Question 12

Technical Controls

Answer 12

Smart cards, encryption, access control lists (ACLs), intrusion detection
systems, and network authentication

Question 13

Administrative Controls

Answer 13

Policies, procedures, security awareness training, contingency planning,
and disaster recovery plans
User training is the most cost-effective security control to use

Question 14

Five Types of Hackers

Answer 14

White Hats
Black Hats
Gray Hats
Blue Hats
Elite

Question 15

White Hats

Answer 15

Non-malicious hackers who attempt to break into a company’s

systems at their request

Question 16

Black Hats

Answer 16

Malicious hackers who break into computer systems and networks without authorization or permission

Question 17

Gray Hats

Answer 17

Hackers without any affiliation to a company who attempt to break into a company’s network but risk the law by doing so

Question 18

Blue Hats

Answer 18

Hackers who attempt to hack into a network with permission of the company but are not employed by the company

Question 19

Elite

Answer 19

Hackers who find and exploit vulnerabilities before anyone else
does
1 in 10,000 are elite

Question 20

Threat Actors

Answer 20

Script Kiddies
Hacktivists
Organized Crime
Advanced Persistent Threats

Question 21

Script Kiddies

Answer 21

Hackers with little to no skill who only use the tools and exploits written
by others

Question 22

Hacktivists

Answer 22

Hackers who are driven by a cause like social change, political agendas, or
terrorism

Question 23

Organized Crime

Answer 23

Hackers who are part of a crime group that is well-funded and highly sophisticated

Question 24

Advanced Persistent Threats

Answer 24

Highly trained and funded groups of hackers (often by nation states) with covert and open-source intelligence at their disposal