Chapter 11 - OSI

Question 1

What are three common methods to attack people ?

Answer 1

Social Engineering attacks, Social Network attacks an password attacks

Question 2

What are two components of reduction analysis

Answer 2

1. Reducing the number of attacks we have to consider
2. Reducing a threat posed by attackers

Question 3

What are the three Categories of controls?

Answer 3

Administrative, Technical an Physical

Question 4

What are the 2 types of intellectual property

Answer 4

Industrial and copy right

Question 5

Define CIA

Answer 5

Confidentiality Integrity and Availability

Question 6

Define Confidentiality

Answer 6

Provides a high level of assurance that information is kept form unauthorised parties

Question 7

Sensitivity

Answer 7

Measure of Harm or Damage if Information was to be disclosed

Question 8

What are the Goals of Security

Answer 8

Confidentiality, Integrity an Availbility

Question 9

When is confidentiality achieved

Answer 9

When we have a High level of assurance that the information is kept from Un authorised parties

Question 10

How can Confidentiality be circumvented ?

Answer 10

Social engineering attacks such as

• Shoulder surfing ,
• Brute Force Password attacks
• Decrypting Packets

Question 11

Confidentiality is enforced by

Answer 11

• Encrypting data
• Classifying and restricting data

Question 12

Encryption at rest, encryption in Transit and access Controls are Examples of which CIA objective

Answer 12

Confidentiality

Question 13

Other important Confidentiality Concepts are :

Answer 13

• Sensitivity
• Discression
• Criticatlity
• Conealment
• Secrecy
• Privacy
• Seclussion
• Issolation

Question 14

Measure of harm or damage if the information was t be disclosed

Answer 14

Sensitivity

Question 15

shown by person choosing to control disclosure of information to limit damage

Answer 15

Disclosure