CompTIA Security+

Question 1

What does CIA triad refer to ?

Answer 1

Confidentially
Integrity

Question 2

What does NIST stand for?

Answer 2

National Institute of Standards and Technology

Question 3

What are the 5 steps of NIST?

Answer 3

Identify - develop security policies and capabilities. Evaluate risks, threats and vulnerabilities and recommend security controls to mitigate them.

Protect - procure/develop, install, operate , and decommission IT hardware and software assets with security as an embedded requirement of every stage of this operation life cycle.

Detect - perform ongoing, proactive monitoring to ensure that controls are effective and capable of protecting against new types of threats.

Respond - identify, analyse, contain and eradicate threats to systems and data security.

Recover - implement cybersecurity resilience to restore systems and data if other controls are unable to prevent attacks

Question 4

What is a security policy?

Answer 4

This is a formalized statement that defines how security will be implemented within an organisation.