ISMT 311

What is the "A" in CIA Triad stands for?

• Accessibility
• Accountability
• Availability
• Accuracy

A leading threat that an attacker pretends to be your destination on the network. When a person tries to connect to a specific destination, an attacker can mislead him to a different service and pretend to be that network access point or server.

• Logic Bombs
• Man-in-the Middle Attack
• Phishing
• Pharming

It acts as a barrier between your computer/private network and the internet.

• Scanner
• IPS
• IDS
• Firewall

It is the process of managing risks associated with the use of information technology. It involves identifying, assessing, and treating risks to the confidentiality, integrity, and availability of an organization's assets.

• Information Security Threat Management
• Information Security Risk Management
• Information Security
• Information Technology

is risk to the information security program’s ability to mitigate relevant strategic risk to information. (Risk associated with the effectiveness and efficiency of the INFOSEC Programs)

• Tactical Risk
• Operational Risk
• Strategic Risk
• Residual Risk

risk is concerned with the ability to implement the tactical risk-based control objectives. Such risk includes budget, timelines, and technologies.

• Tactical Risk
• Operational Risk
• Strategic Risk
• Residual Risk

What is the 2nd Step in the Risk Management Process

• Quantify Risk
• Set Scope
• Mitigate Risk
• Identify Risk

It assures the Compliance with INFOSEC Regulations and Programs

• Scope of Tactical Risk
• Scope of Operational Risk
• Scope of Strategic Risk
• Scope of Residual Risk

It is a proactive process to predict future risk based upon identified or perceived vulnerability

• Incident Evaluation
• Threat Forecasting
• Threat Evaluation
• Incident Forecasting

It’s a hijacker software with the ability to encrypt files or block devices, then, a payment is required for unlocking.

• Rootkits

• Ransomware

• Trojan

• Pharming