principles of security

Question 1

confidentiality (triad)

Answer 1

protection of data from unauthorized access and missuse

Question 2

integrity (triad)

Answer 2

condition where data is kept accurate and consistent unless authorized changes are made

Question 3

availability (triad)

Answer 3

data is available and accessible to authorized users

Question 4

threat modelling

Answer 4

process of reviewing, improving, and testing security protocols in place at organization’s information technology infrastructure/services

Question 5

an effective threat model includes

Answer 5

threat intelligence
asset identification
mitigation capabilities
risk assessment

Question 6

Incident Response

Answer 6

IR
*steps taken to resolve/remediate the effects of an incident

Question 7

incidents are classified..?

Answer 7

using rating of urgency/impact
*urgency determined by attack type
*impact determined by affected system and repercussions

Question 8

CSIRT

Answer 8

comp sec IR team
*pre-arranged group of employees with knowlege of systems/current incident

Question 9

six phases of incident response

Answer 9

preparation
identification
containment
eradication
recovery
lessons learned