ISC2 - Chapter 1 - Module 1 - G2

What is meant by non-repudiation?

• If a user does something, they can't later claim that they didn't do it.

• Controls to protect the organization's reputation from harm due to inappropriate social media postings by employees, even if on their private accounts and personal time. 

• It is part of the rules set by administrative controls.

• It is a security feature that prevents session replay attacks.

The concept of "secrecy" is most related to which foundational aspect of security?

• Confidentiality

• Integrity

• Availability

• Plausibility

For which of the following assets is integrity probably the most important security aspect?

• One frame of a streaming video

• The file that contains passwords used to authenticate users

• The color scheme of a marketing website

• Software that checks the spelling of product descriptions for a retail website

For which of the following systems would the security concept of availability probably be most important?

• Medical systems that store patient data

• Retail records of past transactions

• Online streaming of camera feeds that display historical works of art in museums around the world

• Medical systems that monitor patient condition in an intensive care unit

Which of the following is an example of a "something you are" authentication factor?

• A credit card presented to a cash machine

• Your password and PIN

• A user ID

• A photograph of your face

Security needs to be provided to ____ data?

• Restricted

• Illegal

• Private

• All

What are the three pillars of information assurance?

• Identification, Authentication, Non-repudiation

• Data, User, Infrastructure

• Confidentiality, Integrity, Availability

• PII, PHI, Sensitive information

Sensitivity is a measure of the ...?

• … pertinence assigned to information by its owner, or the purpose of representing its need for urgency.

• … importance assigned to information by its owner, or the purpose of representing its need for protection.

• … urgency and protection assigned to information by its owner.

• … protection and timeliness assigned to information by its owner, or the purpose of representing its need for urgency.

The process of verifying or proving the user's identification is known as:?

• Confidentiality

• Authentication

• Authorization

• Identification

Which of the following Cybersecurity concepts guarantees that information is accessible only to those authorized to access it?

• Non-repudiation

• Authentication

• Confidentiality

• Accessibility