Chapter 1 - Today's Security Professional

Question 1

Ensures that unauthorized individuals are not able to gain access to sensitive information.

Answer 1

Confidentiality

Question 2

Ensures that information and systems are ready to meet the needs of legitimate users at the time those users request them.

Answer 2

Availability

Question 3

Ensures that there are no unauthorized modifications to information or systems, either intentionally or unintentionally.

Answer 3

Integrity

Question 4

Someone who performed some action, such as sending a message, cannot later deny having taken that action

Answer 4

Nonrepudiation

Question 5

A violation, or imminent threat of a violation, of a security policy or practice within the organization.

Answer 5

Security incidents

Question 6

The occurrence of a violation of confidentiality when resources are made accessible to unauthorized entities.

Answer 6

Disclosure

Question 7

An attack in which access to sensitive information is gained and then removed from an organization.

Answer 7

Data exfiltration attack

Question 8

The unauthorized modification of information and a violation of the principle of integrity.

Answer 8

Alteration

Question 9

The unintended disruption of an authorized user’s legitimate access to information.

Answer 9

Denial

Question 10

The risk of monetary damage to the organization as the result of a data breach.

Answer 10

Financial risk

Question 11

The risk that the negative publicity surrounding a security breach causes
the loss of goodwill among customers, employees, suppliers, and other stakeholders.

Answer 11

Reputational risk

Question 12

The risk that an organization will become less effective in meeting its major goals and objectives as a result of the breach.

Answer 12

Strategic risk

Question 13

The risk to the organization’s ability to carry out its day-to-day functions.

Answer 13

Operational risk

Question 14

The risk that a security breach causes an organization to run afoul of legal or regulatory requirements.

Answer 14

Compliance risk

Question 15

The risk of monetary damage to the organization as the result of a
data breach.

Answer 15

Financial risk

Question 16

The risk that the negative publicity surrounding a security breach causes
the loss of goodwill among customers, employees, suppliers, and other stakeholders.

Answer 16

Reputational risk

Question 17

When a security breach strikes an organization, the effects of that breach often extend beyond the walls of the breached organization, affecting customers, employees,and other individual stakeholders. The most common impact on these groups is the risk of identity theft posed by exposure of personally identifiable information (PII) to unscrupulous individuals.

Answer 17

Identity theft

Question 18

The risk that an organization will become less effective in meeting its major goals and objectives as a result of the breach.

Answer 18

Strategic risk

Question 19

The risk to the organization’s ability to carry out its day-to-day functions.

Answer 19

Operational risk

Question 20

The risk that a security breach causes an organization to run afoul of legal or regulatory requirements.

Answer 20

Compliance risk

Question 21

The safeguards or countermeasures used to address security vulnerabilities to reduce or manage risk.

Answer 21

Security controls

Question 22

During a gap analysis, the cybersecurity professional reviews the control objectives for a particular organization, system, or service and then examines the controls designed to achieve those objectives.

Answer 22

Gap analysis

Question 23

Controls that rely on technology.

Answer 23

Technical controls

Question 24

The mechanisms and procedures used to ensure or maintain security on a day-to-day basis.

Answer 24

Operational controls

Question 25

Sometimes called procedural controls, these are controls that are implemented through processes like awareness, training, and oversight.

Answer 25

Managerial controls

Question 26

Measures used to restrict physical access and prevent direct contact with systems or areas within a facility to protect assets and resources.

Answer 26

Physical controls