Topic 1

Question 1

Any transaction online, including online banking, software services, remote service providers, or online course platforms.

Answer 1

E-commerce

Question 2

Aspects of Information Needing protection

Answer 2

Availability
Confidentiality
Authentication
Non-repudiation

Question 3

is the resource being protected

Answer 3

Assets

Question 4

devices, computers, people

Answer 4

Physical assets

Question 5

information, data (in transmission, storage, or processing), and intellectual property

Answer 5

Logical assets

Question 6

any software, hardware, data, administrative, physical, communications, or personnel resource within an information system

Answer 6

System assets

Question 7

an attack in which the attacker observes interaction with the system

Answer 7

Passive attack

Question 8

an attack in which the attacker directly interacts with the system

Answer 8

Active attack

Question 9

an attack where there is not a deliberate goal of misuse

Answer 9

Unintentional attack

Question 10

is an instance when the system is vulnerable to attack

Answer 10

Exposure

Question 11

is a situation in which the attacker has succeeded

Answer 11

Compromise

Question 12

is a recognized, action specific, generalized or theoretical that an adversary (threat actor) might be expected to take in preparation for an attack

Answer 12

Indicator

Question 13

is the outcome of the attack, may cause the information system to lose effectiveness and may have other costs

Answer 13

Consequence

Question 14

targets availability

Answer 14

Disruption

Question 15

targets integrity

Answer 15

Corruption

Question 16

targets confidentiality

Answer 16

Exploitation

Question 17

is a type of consequence, involving accidental exposure of information to an agent not authorized access.

Answer 17

Inadvertent disclosure

Question 18

Taxonomy of attacks with relation to security goals

Answer 18

Threat to Confidentiality
Threat to integrity
Threat to availability

Question 19

Snooping
Traffic analysis

Answer 19

Threat to Confidentiality

Question 20

Modification
Masquerading
Replaying
Repudiation

Answer 20

Threat to integrity

Question 21

Denial of service

Answer 21

Threat to availability

Question 22

information needs to be hidden from unauthorized access

Answer 22

Confidentiality

Question 23

protected from unauthorized change

Answer 23

Integrity

Question 24

Available to an authorized entity when it is needed

Answer 24

Availability

Question 25

Characteristics of information to be useful

Answer 25

Accurate Timely Complete Verifiable Consistent Available

Question 26

timely, reliable access to data and information services for authorized users

Answer 26

Aspects of Information Needing protection - Availability

Question 27

you can only see the data but you cannot change it, protection against unauthorized modification or destruction of information

Answer 27

Aspects of Information Needing protection - Integrity

Question 28

assurance that information is not disclosed to unauthorized parties

Answer 28

Aspects of Information Needing protection - Confidentiality

Question 29

to identify and verify user’s identity , security measures to establish the validity of a transmission, message or originator

Answer 29

Aspects of Information Needing protection - Authentication

Question 30

you cannot deny the authenticity/validity of an act you committed, sender given proof of data delivery and recipient given proof of sender’s identity so that neither can deny processed data

Answer 30

Aspects of Information Needing protection - Non-repudiation