CO2521 Recap Week 09

Information Security often refers to the CIA Triad, what does the 'C' stand for?

• Conservation

• Complexity

• Confidentiality

• Checkguard

Information Security often refers to the CIA Triad, what does the 'A' stand for?

• Authentication

• Authority

• Availability

• Access

Which part of the CIA Triad ensures that information is present at the time when authorized parties require it.

• Authorisation

• Authentication

• Confidentiality

• Availalibility

​ ​ (a)   is an example of physical asset

• The web server
• The web pages
• network traffic
• the user data

​ ​ (a)   is the Intentional or unintentional act that causes damage/compromise information or systems

• Attack
• Exploit
• Loss
• Threat

​ ​ (a)   action that has the potential to adversely affect operations and assets.

• Threat
• Attack
• Exploit
• Loss

​ (a)   is the probability that a ​ (b)   will be exploited

• Risk
• Vulnerability
• Threat
• Malware
• Report
• Loss

Match the following

• The mechanism that records all actions

• Authenication

• The process by which a control establishes whether a user is the entity it claims to be.

• Accountability

• the mechnanism that represents the matching of authenicated users to assets and access levels.

• Authorisation

Which of these is NOT a direct threat to Integrity?

• Unauthorised access.

• Malicious modification

• ntentional replacement

• System back doors

• Sniffing

Events that lead to availability violation include; (select two)

• Failing to fully authenticate a remote system before transferring data.

• Under-allocating resources

• Mislabelling or incorrectly classifying objects

• None of these