Principles of Security

What does CIA stand for?

• Confidence, Integrity, Accountability

• Confidentiality, Integrity, Availability

• Configuration, Information, Acceptance

• Countermeasure, Intrusion, Access

Passwords are what type of control?

• Preventive

• Detective

• Corrective

• Deterrent

Risk management is the process of identifying, assessing, and reducing the risk to an acceptable level and implementing the right mechanisms to maintain that level of risk.

• True

• False

Who bears ultimate responsibility for the protection of assets within the organization?

• Data owners

• Stakeholders

• Senior management

• Security professionals

Which of the following is NOT addressed by the data retention policy?

• What data to keep

• For whom data is kept

• How long data is kept

• Where data is kept

Water detectors can help prevent damage to:

• Equipment

• Flooring

• Computers

• All of the above

Location of water detectors should be:

• Under raised floors

• On dropped ceilings

• Both

• Neither

Telecommunications is the electromagnetic transmission of data among systems, whether through analog, digital, or wireless transmission types.

• True

• False

Which access control method is considered user-directed?

• Nondiscretionary

• Mandatory

• Identity-based

• Discretionary

What role does biometrics play in access control?

• Authorization

• Authenticity

• Authentication

• Accountability