Summarize Fundamental Security Concepts

Question 1

CIA Triad

Answer 1

Three principles of security control and management. Also known as the information security triad. Also
referred to in reverse order as the AIC triad.

Question 2

Confidentiality

Answer 2

The fundamental security goal of keeping information and communications private and protecting them from
unauthorized access.

Question 3

Integrity

Answer 3

The fundamental security goal of keeping organizational information accurate, free of errors, and without
unauthorized modifications.

Question 4

Availability

Answer 4

The fundamental security goal of ensuring that computer systems operate continuously and that authorized
persons can access data that they need.

Question 5

Non-repudiation

Answer 5

The security goal of ensuring that the party that sent a transmission or created data remains associated with that
data and cannot deny sending or creating that data.

Question 6

National Institute of Standards and Technology
(NIST)

Answer 6

Develops computer security standards used by US federal agencies and publishes cybersecurity best practice
guides and research.

Question 7

Cybersecurity frameworks (CSF).

Answer 7

Standards, best practices, and guidelines for effective security risk management. Some frameworks are general
in nature, while others are specific to industry or technology types.

Question 8

security controls

Answer 8

A technology or procedure put in place to mitigate vulnerabilities and risk and to ensure the confidentiality,
integrity, and availability (CIA) of information.

Question 9

Gap analysis

Answer 9

An analysis that measures the difference between the current and desired states in order to help assess the
scope of work included in a project.

Question 10

Identify and access management (IAM)

Answer 10

A security process that provides identification, authentication, and authorization mechanisms for users,
computers, and other entities to work with organizational assets like networks, operating systems, and
applications.

Question 11

Identification

Answer 11

The process by which a user account (and its credentials) is issued to the correct person. Sometimes referred to
as enrollment.

Question 12

Authentication

Answer 12

A method of validating a particular entity’s or individual’s unique credentials.

Question 13

Authorization

Answer 13

The process of determining what rights and privileges a particular entity has.

Question 14

Accounting

Answer 14

Tracking authorized usage of a resource or use of rights by a subject and alerting when unauthorized use is
detected or attempted.