Section 2

Question 1

Which concept of the CIA Triad is associated with reliability?

Answer 1

Integrity

Question 2

A malicious actor has breached the firewall with a reverse shell. Which side of the CIA triad is most affected?

Answer 2

Confidentiality

Question 3

A user changes a number in a dataset with a typo. Which side of the CIA triad is most affected?

Answer 3

Integrity

Question 4

Types of identification

Answer 4

“something you know”
“something you are”
“something you have”

Question 5

What is the final step in allowing access to resources?

Answer 5

authorization

Question 6

discretionary access control

Answer 6

Owner determines who gets access and what level

Question 7

mandatory access control

Answer 7

• owner doesn’t get to decide
• Separate group w/ authority sets access (gov. organizations)

Question 8

Rule-based access control

Answer 8

access according to a set of rules

Question 9

Attribute-based access control

Answer 9

based on specific attributes of a person, resource, or environment

Question 10

Which attribute of the Parkerian hexad allows for proper attribution of the owner of a dataset?

Answer 10

Authenticity
- process of ensuring and confirming that the identity of the user is genuine and legitimate. Proving who you are.

Question 11

Which type of attack category is an attack against confidentiality?

Answer 11

Interception

Question 12

Incident Response steps

Answer 12

1. preparation
2. detection and analysis
3. containment
4. eradication
5. recovery
6. post incident activity

Question 13

Mutual authentication

Answer 13

What is the name of the process where the client authenticates the server and the server authenticates the client?

Question 14

Why are audits performed?

Answer 14

Audits are performed to ensure compliance with applicable laws, policies, and other administrative controls is being accomplished as well as detecting misuse.